CVE-2015-8004: Medium severity mediawiki vulnerability
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly restrict access to revisions, which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action, which returns a valid a change form.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8004?
CVE-2015-8004 is rated as a medium severity vulnerability due to the potential for unauthorized access to suppressed revisions.
How do I fix CVE-2015-8004?
To fix CVE-2015-8004, upgrade MediaWiki to version 1.23.11, 1.24.4, or 1.25.3 or later.
Who is affected by CVE-2015-8004?
CVE-2015-8004 affects MediaWiki versions prior to 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3.
What does CVE-2015-8004 exploit?
CVE-2015-8004 exploits inadequate access restrictions allowing remote authenticated users to remove suppression from revisions.
In what scenarios can CVE-2015-8004 be exploited?
CVE-2015-8004 can be exploited when authenticated users possess the viewsuppressed user right and manipulate the revisiondelete action.