Description

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.

Remediation

References

CVE-2018-13258

Related Vulnerabilities

WordPress Plugin File Manager Multiple Cross-Site Request Forgery Vulnerabilities (5.0)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2018-10237)

WordPress Plugin Testimonial WordPress-AP Custom Testimonial includes Backdoor [Only if downloaded via the vendor website] (1.4.6)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5629)

Oracle Database Server CVE-2012-1747 Vulnerability (CVE-2012-1747)

Severity

Medium

Classification

CVE-2018-13258 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities