CVE-2013-1816 — Improper Input Validation in Mediawiki

CWE-20 — Improper Input Validation7 documents5 sources
Severity
7.5HIGHNVD
EPSS
4.1%
top 11.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
MediawikiDebian MediawikiDebian Linux+2 more
Timeline
PublishedNov 20
Latest updateMay 5

Description

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/mediawiki< mediawiki 1:1.19.4-1 (bookworm)
▶NVDmediawiki/mediawiki1.20.0 — 1.20.3+1
▶Debianmediawiki/mediawiki< 1:1.19.4-1+3
▶CVEListV5mediawiki/mediawiki1.19.4, 1.20.3+1

Also affects: Debian Linux 10.0, 9.0, Fedora 18, Enterprise Linux 6.0

🔴Vulnerability Details

2
GHSA
GHSA-g7xp-g555-2g9m: MediaWiki before 1↗2022-05-05
▶
OSV
CVE-2013-1816: MediaWiki before 1↗2019-11-20
▶

📋Vendor Advisories

1
Debian
CVE-2013-1816: mediawiki - MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to caus...↗2013
▶

💬Community

3
Bugzilla
CVE-2013-1816 CVE-2013-1817 mediawiki119 various flaws [epel-6]↗2013-03-05
▶
Bugzilla
CVE-2013-1816 MediaWiki: Pass '2' instead of 'true' to CURLOPT_SSL_VERIFYHOST↗2013-03-05
▶
Bugzilla
CVE-2013-1816 CVE-2013-1817 mediawiki119 various flaws [fedora-18]↗2013-03-05
▶
CVE-2013-1816 — Improper Input Validation in Mediawiki | cvebase