Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Vulnerability - CVE-2023-36674 - Vulnerability Database
MediaWiki

MediaWiki Vulnerability - CVE-2023-36674

Medium
Reference: CVE-2023-36674
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-36674
Title: MediaWiki Vulnerability
Overview:

An issue was discovered in MediaWiki before 1.35.11 1.36.x through 1.38.x before 1.38.7 1.39.x before 1.39.4 and 1.40.x before 1.40.1. It is possible to bypass the Bad image list (aka badFile) by using the thumb parameter (aka Manualthumb) of the File syntax.