CVE-2008-5688: Mediawiki

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught exception.

Affected products

• Mediawiki Mediawiki: version 1.8.1 only; version 1.8.2 only; version 1.8.3 only; version 1.8.4 only; version 1.8.5 only; version 1.9.0 only; …

Published 2008-12-19. Last modified 2026-06-16.