MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly normalize IP addresses containing zero-padded octets, which might allow remote attackers to bypass intended access restrictions by using an IP address that was not supposed to have been allowed.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-03-23T20:00:00
Updated: 2024-08-06T08:20:43.575Z
Reserved: 2015-12-23T00:00:00
Link: CVE-2015-8627
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-03-23T20:59:00.657
Modified: 2017-03-27T14:18:42.603
Link: CVE-2015-8627
Redhat
No data.