Resource management error in MediaWiki - CVE-2015-8003
Published: November 9, 2015 / Updated: August 9, 2020
Vulnerability identifier: #VU40601
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-8003
CWE-ID: CWE-399
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote #AU# to perform a denial of service (DoS) attack.
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows remote authenticated users to have unspecified impact via multiple file uploads.
Affected software
MediaWiki
How to mitigate CVE-2015-8003
Install update from vendor's website.