CVE-2012-4885

Description

The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) via certain input, as demonstrated by the padleft function.

How to fix CVE-2012-4885

To remediate CVE-2012-4885, upgrade the affected package to a fixed version below.

• Debian/mediawiki—upgrade to 1:1.19.0-1 or later

Is CVE-2012-4885 being exploited?

Low — EPSS is 1.2%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1:1.19.0-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-4885