CVE-2005-0536

Description

Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.

How to fix CVE-2005-0536

To remediate CVE-2005-0536, upgrade the affected package to a fixed version below.

• Debian/mediawiki—upgrade to 1.4.9 or later

Is CVE-2005-0536 being exploited?

Low — EPSS is 1.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.4.9

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-0536