The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
References
Configurations
History
21 Nov 2024, 02:01
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html - | |
References | () http://www.openwall.com/lists/oss-security/2015/08/12/6 - | |
References | () http://www.openwall.com/lists/oss-security/2015/08/27/6 - | |
References | () https://github.com/wikimedia/mediawiki/commit/dc2966bd05b69321300c63fd0bd78e7c78ecea6e - | |
References | () https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html - Vendor Advisory | |
References | () https://phabricator.wikimedia.org/T48457 - |
Information
Published : 2015-09-01 14:59
Updated : 2024-11-21 02:01
NVD link : CVE-2013-7444
Mitre link : CVE-2013-7444
CVE.ORG link : CVE-2013-7444
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor