RCE bug found in platform that powers Wikipedia, other Wiki sites | ICT Security-Sécurité PC et Internet | Scoop.it
A security update for the buggy MediaWiki platform was made available on Tuesday.


“Your MediaWiki installation is affected by a remote code execution vulnerability if you have enabled file upload support for DjVu (natively supported by MediaWiki) or PDF files (in combination with the PdfHandler extension),” Steipp wrote. “Neither file type is enabled by default in MediaWiki installations.


===> If you are affected, we strongly urge you to update immediately.” <===