Security Advisory

CVE-2015-8004

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-11-09 18:00:00

Last updated 2024-08-06 08:06:31

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly restrict access to revisions, which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action, which returns a valid a change form.

← Browse all CVEs View on cve.org ↗