Search for vulnerabilities
Vulnerability details: VCID-fgbq-q2ny-aaas
Vulnerability ID VCID-fgbq-q2ny-aaas
Aliases CVE-2015-8004
Summary MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly restrict access to revisions, which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action, which returns a valid a change form.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-264 Permissions, Privileges, and Access Controls
System Score Found at
generic_textual Medium http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8004.html
epss 0.00119 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00119 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00119 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00119 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00120 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00247 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
epss 0.00369 https://api.first.org/data/v1/epss?cve=CVE-2015-8004
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8004
cvssv2 4.0 https://nvd.nist.gov/vuln/detail/CVE-2015-8004
generic_textual Medium https://phabricator.wikimedia.org/T95589
Reference id Reference type URL
http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8004.html
https://api.first.org/data/v1/epss?cve=CVE-2015-8004
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8004
https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
https://phabricator.wikimedia.org/T95589
http://www.securitytracker.com/id/1034028
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
CVE-2015-8004 https://nvd.nist.gov/vuln/detail/CVE-2015-8004
No exploits are available.
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2015-8004
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.46669
EPSS Score 0.00119
Published At Dec. 17, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.