MediaWiki is a free and free-to-use web-based wiki engine from the U.S. Wikimedia (MediaWiki) Foundation. A security vulnerability exists in MediaWiki, which stems from the use of file mode 0644 when installed using a pre-existing data directory with weak privileges, which allows local users to read SQLITE files of the world, including credential data. No details of the vulnerability are currently available.
CPE | Name | Operator | Version |
---|---|---|---|
mediawiki mediawiki | lt | 1.35.9 | |
mediawiki mediawiki >=1.36.0, | lt | 1.38.5 | |
mediawiki mediawiki | eq | 1.39.0 |