Published: 15/11/2017 Updated: 28/11/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

api.php in MediaWiki prior to 1.27.4, 1.28.x prior to 1.28.3, and 1.29.x prior to 1.29.2 has a Reflected File Download vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mediawiki mediawiki 1.29.0
mediawiki mediawiki 1.29.1
mediawiki mediawiki 1.28.0
mediawiki mediawiki 1.28.1
mediawiki mediawiki
mediawiki mediawiki 1.28.2
debian debian linux 9.0

apiphp in MediaWiki before 1274, 128x before 1283, and 129x before 1292 has a Reflected File Download vulnerability ...

CVE-2017-8809 Docker - RFD(Reflected File Download) for MediaWiki

CVE-2017-8809 - RFD(Reflected File Download) for MediaWiki A remote user can create a specially crafted URL for the target site that, when loaded by the target user, will cause the 'apiphp' script to download a file containing shell commands [CVE-2017-8809] The file will be served by the target site Environment Google Chrome 790 MediaWiki 1291 Using Run $

CWE-74 https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html https://www.debian.org/security/2017/dsa-4036 http://www.securitytracker.com/id/1039812 https://nvd.nist.gov https://github.com/motikan2010/CVE-2017-8809_MediaWiki_RFD https://security.archlinux.org/CVE-2017-8809

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-8809

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect