CVE-2010-1190

thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img_auth.php, does not check user permissions before providing…

published March 31, 2010

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img_auth.php, does not check user permissions before providing scaled images, which allows remote attackers to bypass intended access restrictions and read private images via unspecified manipulations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01417 · 72.4th percentile
Published
2010-03-31T17:35Z
EPSS history
Timeline
  • 31 MAR 17:35Z
    thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img_auth.php, does not check user permissions before providing…
    cvelistv5