CVE-2008-5687: Medium severity MediaWiki MediaWiki vulnerability
MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MediaWikito a version that resolves this vulnerability.Fixed in 1.13.3
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5687?
CVE-2008-5687 has a moderate severity level as it allows unauthorized access to deleted image backups.
How do I fix CVE-2008-5687?
To fix CVE-2008-5687, upgrade to MediaWiki version 1.13.3 or later.
What versions of MediaWiki are affected by CVE-2008-5687?
CVE-2008-5687 affects MediaWiki versions prior to 1.13.3, including 1.11 and 1.12.
What kind of attacks can be performed using CVE-2008-5687?
Attackers can exploit CVE-2008-5687 to download and retrieve sensitive information from deleted images.
Are there any workarounds for CVE-2008-5687?
Temporary workarounds may include restricting access to the directory where deleted images are stored.