{"id":"MGASA-2013-0221","summary":"Updated mediawiki packages fix security vulnerability","details":"MediaWiki user Marco discovered that security checks for file uploads were\nnot being run when the file was uploaded in chunks through the API. This\noption has been available to users who can upload files since MediaWiki\n1.19 (CVE-2013-2114).\n","modified":"2026-04-16T06:25:30.084117153Z","published":"2013-07-21T08:57:46Z","upstream":["CVE-2013-2114"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2013-0221.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=10784"},{"type":"WEB","url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-May/000131.html"},{"type":"WEB","url":"https://www.mediawiki.org/wiki/Release_notes/1.20#MediaWiki_1.20.6"}],"affected":[{"package":{"name":"mediawiki","ecosystem":"Mageia:3","purl":"pkg:rpm/mageia/mediawiki?arch=source&distro=mageia-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.6-1.2.mga3"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2013-0221.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}