VDB
DEBIAN-CVE-2013-2114
DEBIAN-CVE-2013-2114
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | mediawiki | 0, 0, 0 |
| Debian:11 | mediawiki | 0, 0, 0 |
| Debian:12 | mediawiki | 0, 0, 0 |
| Debian:14 | mediawiki | 0, 0, 0 |
Timeline
- Nov 18, 2013 CVE Published
- Aug 4, 2026 CVE Updated