CVE-2020-15005: img_auth.php may leak private extension images into the public cache
imgauth.php may leak private extension images into the public cache
Other sources
In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the imgauth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/mediawiki/coreto a version that resolves this vulnerability.Fixed in 1.34.2 - Upgrade
Upgrade
composer/mediawiki/coreto a version that resolves this vulnerability.Fixed in 1.33.4 - Upgrade
Upgrade
composer/mediawiki/coreto a version that resolves this vulnerability.Fixed in 1.31.8 - Upgrade
Upgrade
debian/mediawikito a version that resolves this vulnerability.Fixed in 1:1.39.17-1+deb12u2Fixed in 1:1.43.9+dfsg-1~deb13u1Fixed in 1:1.43.11+dfsg-3
Event History
Frequently Asked Questions
What is the severity of CVE-2020-15005?
CVE-2020-15005 is considered a medium severity vulnerability due to unauthorized access to private files on MediaWiki installations.
How do I fix CVE-2020-15005?
To mitigate CVE-2020-15005, upgrade MediaWiki to versions 1.31.8, 1.33.4, or 1.34.2 or later.
What systems are affected by CVE-2020-15005?
CVE-2020-15005 affects MediaWiki versions before 1.31.8, 1.32.x, 1.33.x before 1.33.4, and 1.34.x before 1.34.2.
Can unauthenticated users access files in private wikis due to CVE-2020-15005?
Yes, CVE-2020-15005 allows unauthorized users to access files cached publicly from private wikis.
Is there a known workaround for CVE-2020-15005?
There is no widely recognized workaround for CVE-2020-15005; upgrading to the fixed versions is recommended.