CVE-2018-13258: Mediawiki

Medium severity, CVSS 5.3. EPSS: 2.3% chance of exploitation in the next 30 days.

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.

Affected products

• Mediawiki Mediawiki: from 1.31.0, up to and including 1.31.1

Published 2018-10-04. Last modified 2026-06-17.