← All advisories

Medium severity5.3NVD Advisory· Published Oct 4, 2018· Updated Jun 17, 2026

CVE-2018-13258

CVE-2018-13258

Description

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mediawiki/corePackagist	>= 1.31.0, < 1.31.1	1.31.1

Affected products

2

ghsa-coords
pkg:composer/mediawiki/core
Range: >= 1.31.0, < 1.31.1
MediaWiki/Mediawikiv5
Range: 1.31 before 1.31.1

Patches

Vulnerability mechanics

References

6

lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.htmlnvdPatchVendor AdvisoryWEB
phabricator.wikimedia.org/T199029nvdPatchThird Party AdvisoryWEB
www.securitytracker.com/id/1041695nvdThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-2c28-7gwv-cpgfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-13258ghsaADVISORY
github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-13258.yamlghsaWEB

News mentions

0

No linked articles in our index yet.