CVE-2013-1816 - MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request

Back Back to CVE browser

HIGH

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request

Published Nov 20, 2019

7.5

HIGH

CVSS 3.1

EPSS 2.68%

Description

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request.

Affected products

Vendor MediaWiki Product MediaWiki Default
n/a
- Version
  1.19.4
  Status
  affected
  Constraints
  -
- Version
  1.20.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

MediaWiki

n/a

Version	Status	Constraints
1.19.4	affected	-
1.20.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (7)

http://security.gentoo.org/glsa/glsa-201310-21.xml
x_refsource_MISCThird Party Advisory
http://www.openwall.com/lists/oss-security/2013/03/05/4
x_refsource_MISCMailing ListRelease NotesThird Party Advisory
http://www.securityfocus.com/bid/58306
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1816
x_refsource_MISCIssue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1835
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88360
x_refsource_MISCThird Party AdvisoryVDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-1816
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://security.gentoo.org/glsa/glsa-201310-21.xml		x_refsource_MISCThird Party Advisory
http://www.openwall.com/lists/oss-security/2013/03/05/4		x_refsource_MISCMailing ListRelease NotesThird Party Advisory
http://www.securityfocus.com/bid/58306		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1816		x_refsource_MISCIssue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1835		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88360		x_refsource_MISCThird Party AdvisoryVDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-1816		x_refsource_MISCThird Party Advisory