maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/88363
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1837
https://bugzilla.wikimedia.org/show_bug.cgi?id=45355