The reset functionality in the TimedMediaHandler extension for MediaWiki does not create a new transcode, which allows remote attackers to cause a denial of service (transcode deletion) by resetting a transcode.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6735
Reference (s):
- BID:76362
- URL: http://www.securityfocus.com/bid/76362
- https://phabricator.wikimedia.org/T100211
- FEDORA:FEDORA-2015-13920
- URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html