Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-1190
4.3
MEDIUMCVSS v2
Published
March 31, 2010
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img_auth.php, does not check user permissions before providing scaled images, which allows remote attackers to bypass intended access restrictions and read private images via unspecified manipulations.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.3.13, = 1.5.6, = 1.4, = 1.5.1, = 1.5.8, = 1.4.11, = 1.2.4, = 1.12.1, = 1.12.3, = 1.5, = 1.4.9, = 1.4.8, = 1.4.3, = 1.13.0, = 1.4.1, = 1.3.6, = 1.5.3, = 1.15.0, = 1.3.12, = 1.3.5, = 1.13.3, = 1.13.4, = 1.3.0, = 1.2.6, = 1.4.0, = 1.3.9, = 1.4.5, = 1.5.4, = 1.10.4, = 1.14.0, = 1.13.1, = 1.3.10, = 1.5.2, = 1.10.2, = 1.10.1, <= 1.15.1, = 1.2.1, = 1.3, = 1.11, = 1.10.3, = 1.10.0, = 1.11.2, = 1.12.0, = 1.3.15, = 1.2.2, = 1.2.5, = 1.3.4, = 1.4.14, = 1.4.2, = 1.5.5, = 1.5.0, = 1.11.0, = 1.12.2, = 1.3.11, = 1.2.0, = 1.4.10, = 1.5.7, = 1.13.2, = 1.2.3, = 1.3.2, = 1.3.3, = 1.4.7, = 1.4.4, = 1.1.0, = 1.11.1, = 1.12.4, = 1.3.1, = 1.3.14, = 1.3.7, = 1.3.8, = 1.4.13, = 1.4.12, = 1.4.6NVD