VDB
CVE-2010-1190
CVE-2010-1190
PUBLISHED
CVSS 4.300000190734863 MEDIUM
thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img_auth.php, does not check user permissions before providing scaled images, which allows remote attackers to bypass intended access restrictions and read private images via unspecified manipulations.
EPSS 1.42% · 72.4th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
1.42%
72.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mediawiki | mediawiki | 1.4.12, 1.2.0, 1.2.1 |
| n/a | n/a | n/a |
Timeline
- Mar 31, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 31, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
References
- ADV-2010-0685 vdb
- ADV-2010-1001 vdb
- http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_15_2/phase3/RELEASE-NOTES url
- DSA-2022 vendor-advisory
- [MediaWiki-announce] 20100303 MediaWiki security update: 1.15.2 mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2010-1190 advisory
- http://secunia.com/advisories/39022 url
- http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html technical
- http://secunia.com/advisories/39656 technical