UpHeron
All vulnerabilities

Servers and applications

CVE-2015-8004

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly restrict access to revisions, which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action, which returns a valid a change form.

Severity
Medium 4.0
Published
9 Nov 2015
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki
  • Version 1.25.2
  • Version 1.25.1
  • Version 1.25.0
  • Version 1.24.3
All 8 release lines
  • Every version up to 1.23.10
  • Version 1.24.0
  • Version 1.24.1
  • Version 1.24.2
  • Version 1.24.3
  • Version 1.25.0
  • Version 1.25.1
  • Version 1.25.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-8004
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-8004