CVE-2013-2114: Medium severity MediaWiki MediaWiki vulnerability
Published Nov 15, 2013
·Updated
Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
Affected Software
15 affected components
MediaWiki MediaWiki=1.19
MediaWiki MediaWiki=1.19-beta_1
MediaWiki MediaWiki=1.19-beta_2
MediaWiki MediaWiki=1.19.0
MediaWiki MediaWiki=1.19.1
MediaWiki MediaWiki=1.19.2
MediaWiki MediaWiki=1.19.3
MediaWiki MediaWiki=1.19.4
MediaWiki MediaWiki=1.19.5
MediaWiki MediaWiki=1.19.6
MediaWiki MediaWiki=1.20.1
MediaWiki MediaWiki=1.20.2
MediaWiki MediaWiki=1.20.3
MediaWiki MediaWiki=1.20.4
MediaWiki MediaWiki=1.20.5
Remediation
Patch Available
Event History
Nov 15, 2013
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2114?
CVE-2013-2114 is considered a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2013-2114?
To fix CVE-2013-2114, upgrade MediaWiki to version 1.20.6 or later.
3
Which versions of MediaWiki are affected by CVE-2013-2114?
CVE-2013-2114 affects MediaWiki versions 1.19 through 1.19.6 and 1.20.x before 1.20.6.
4
What type of vulnerability is CVE-2013-2114?
CVE-2013-2114 is an unrestricted file upload vulnerability that allows execution of arbitrary code.
5
Can I exploit CVE-2013-2114 remotely?
Yes, CVE-2013-2114 can be exploited remotely by attackers to upload malicious executable files.