CVE-2013-1818

MediaWiki < 1.20.3 - Unauthenticated Arbitrary File Read via mwdoc-filter.php

Title source: llm
STIX 2.1

Description

maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/88363
Third Party Advisory x_refsource_confirm
http://www.mediawiki.org/wiki/Release_notes/1.20
Issue Tracking x_refsource_confirm
https://bugzilla.wikimedia.org/show_bug.cgi?id=45355
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/58304

Scores

EPSS 0.0033
EPSS Percentile 56.2%

Details

CWE
CWE-200
Status published
Products (3)
mediawiki/mediawiki 1.20
mediawiki/mediawiki 1.20.1
mediawiki/mediawiki < 1.20.2
Published Jun 02, 2014
Tracked Since Feb 18, 2026