Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Permissions Privileges and Access Controls Vulnerability - CVE-2015-8004 - Vulnerability Database
MediaWiki

MediaWiki Permissions Privileges and Access Controls Vulnerability - CVE-2015-8004

Medium
Reference: CVE-2015-8004
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-8004
Title: MediaWiki Permissions Privileges and Access Controls Vulnerability
Overview:

MediaWiki before 1.23.11 1.24.x before 1.24.4 and 1.25.x before 1.25.3 does not properly restrict access to revisions which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action which returns a valid a change form.