Skip to content

Commit eaff878

Browse files
committed
added text
1 parent a6be72b commit eaff878

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

modules/auxiliary/scanner/http/mediawiki_svg_fileaccess.rb

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,8 @@ def initialize
2222
expand external entities with the SYSTEM identifier. In order to work MediaWiki must
2323
be configured to accept upload of SVG files. If anonymous uploads are allowed the
2424
username and password aren't required, otherwise they are. This module has been
25-
tested successfully on MediaWiki 1.19.4 and Ubuntu 10.04.
25+
tested successfully on MediaWiki 1.19.4, 1.20.3 on Ubuntu 10.04 and Ubuntu 12.10.
26+
Older versions were also tested but do not seem to be vulnerable to this vulnerability.
2627
The following MediaWiki requirements must be met: File upload must be enabled,
2728
$wgFileExtensions[] must include 'svg', $wgSVGConverter must be set to something
2829
other than 'false'.

0 commit comments

Comments
 (0)