MediaWiki chunked uploads security issue

Description
  • MediaWiki user Marco discovered that security checks for file uploads were not being run when the file was uploaded in chunks through the API. This option has been available to users who can upload files since MediaWiki 1.19. <br/><br/> This issue was fixed in <span class="bb-dark"><strong>MediaWiki v1.20.6</span></strong> and <span class="bb-dark"><strong>MediaWiki v1.19.7</span></strong>.
Remediation
  • Upgrade to the latest version of MediaWiki.