Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-06083
HistoryJan 12, 2023 - 12:00 a.m.

MediaWiki has an unspecified vulnerability (CNVD-2023-06083)

2023-01-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
mediawiki
vulnerability
file mode
sqlite
data access

0.0004 Low

EPSS

Percentile

5.1%

MediaWiki is a free and free-to-use web-based wiki engine from the U.S. Wikimedia (MediaWiki) Foundation. A security vulnerability exists in MediaWiki, which stems from the use of file mode 0644 when installed using a pre-existing data directory with weak privileges, which allows local users to read SQLITE files of the world, including credential data. No details of the vulnerability are currently available.