CVE

Id
62061  
CVE No.
CVE-2013-2114  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
621072 62061 CVE-2013-2114 MLIST:[MediaWiki-announce] 20130521 MediaWiki Security Release: 1.20.6 and 1.19.7  View
621073 62061 CVE-2013-2114 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-May/000131.html  View
621074 62061 CVE-2013-2114 MLIST:[oss-security] 20130524 Re: CVE request: MediaWiki chunked uploads vulnerability  View
621075 62061 CVE-2013-2114 URL:http://www.openwall.com/lists/oss-security/2013/05/24/3  View
621076 62061 CVE-2013-2114 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=48306  View
621077 62061 CVE-2013-2114 GENTOO:GLSA-201310-21  View
621078 62061 CVE-2013-2114 URL:http://security.gentoo.org/glsa/glsa-201310-21.xml  View
621079 62061 CVE-2013-2114 SECUNIA:55433  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24215 JVNDB-2013-005790 Ruby 用 Phusion Passenger gem におけるサービス運用妨害 (DoS) の脆弱性 Ruby 用 Phusion Passenger gem には、サービス運用妨害 (アプリケーション起動の制限) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2013-2119 62061 4.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005790.html  View