UpHeron
All vulnerabilities

Servers and applications

CVE-2015-8001

The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size.

Severity
Low 3.5
Published
9 Nov 2015
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki
  • Version 1.25.2
  • Version 1.25.1
  • Version 1.25.0
  • Version 1.24.3
All 8 release lines
  • Every version up to 1.23.10
  • Version 1.24.0
  • Version 1.24.1
  • Version 1.24.2
  • Version 1.24.3
  • Version 1.25.0
  • Version 1.25.1
  • Version 1.25.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-8001
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-8001