Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25771
HistoryJun 26, 2020 - 3:52 a.m.

Information Disclosure

2020-06-2603:52:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

EPSS

0.002

Percentile

57.8%

mediawiki/core is vulnerable to information disclosure. Files are possibly publicly cached in the caching server using the img_auth.php image authorization security feature due to misconfigured Cache-Control and Vary headers. An unauthenticated user is potentially able to access and view these files.