CVE-2018-13258 log

Source
Severity Medium
Remote Yes
Type Information disclosure
Description
A security issue has been found in mediawiki < 1.31.1 where the tarball is missing .htaccess files used to protect some directories that shouldn't be web accessible.
Group Package Affected Fixed Severity Status Ticket
AVG-765 mediawiki 1.31.0-1 1.31.1-1 Medium Fixed
Date Advisory Group Package Severity Description
25 Sep 2018 ASA-201809-5 AVG-765 mediawiki Medium multiple issues
References
https://phabricator.wikimedia.org/T199029
https://github.com/wikimedia/mediawiki/commit/b78d595feecf9de919258b659628ca7dd872b3f4