CVE-2012-1579

2012-09-0921:55:06

CWE-200

[email protected]

web.nvd.nist.gov

cve-2012-1579

mediawiki

security vulnerability

information disclosure

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.3%

JSON

The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript file, which allows remote attackers to obtain sensitive information.

Affected configurations

NVD

Node

mediawikimediawikiMatch1.17

mediawikimediawikiMatch1.17beta_1

mediawikimediawikiMatch1.17.0

mediawikimediawikiMatch1.17.0rc1

mediawikimediawikiMatch1.17.1

mediawikimediawikiMatch1.17.2

Node

mediawikimediawikiMatch1.18

mediawikimediawikiMatch1.18beta_1

mediawikimediawikiMatch1.18.0

mediawikimediawikiMatch1.18.0rc1

mediawikimediawikiMatch1.18.1

CPENameOperatorVersion
mediawiki:mediawikimediawikieq1.17
mediawiki:mediawikimediawikieq1.17.0
mediawiki:mediawikimediawikieq1.17.1
mediawiki:mediawikimediawikieq1.17.2