Description
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows remote authenticated users to have unspecified impact via multiple file uploads.
Remediation
References
Related Vulnerabilities
Atlassian Jira CVE-2021-39122 Vulnerability (CVE-2021-39122)
MySQL CVE-2013-0368 Vulnerability (CVE-2013-0368)
WordPress Plugin WP-FB-AutoConnect Multiple Cross-Site Request Forgery Vulnerabilities (4.0.5)
Atlassian Jira Missing Authorization Vulnerability (CVE-2019-20407)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5885)