VIR Vulnerability Intelligence Relay

CVE-2013-4571

high
Published 2014-05-12 · Modified 2026-05-06
CVSS v3
—
CVSS v2
7.5
VIR risk
7.5

Description

Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has unspecified impact and remote vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html

Application impact
VendorProductVersionsFixed
mediawikimediawiki1.22.0
mediawikimediawiki1.21
mediawikimediawiki1.21.1
mediawikimediawiki1.21.2
mediawikimediawiki1.21.3
mediawikimediawiki{"endIncluding":"1.19.9"}
mediawikimediawiki1.19
mediawikimediawiki1.19.0
mediawikimediawiki1.19.1
mediawikimediawiki1.19.2
mediawikimediawiki1.19.3
mediawikimediawiki1.19.4
mediawikimediawiki1.19.5
mediawikimediawiki1.19.6
mediawikimediawiki1.19.7
mediawikimediawiki1.19.8

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.