The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page
Reporter | Title | Published | Views | Family All 4 |
---|---|---|---|---|
![]() | CVE-2013-6455 | 28 Jan 202014:54 | – | cvelist |
![]() | Design/Logic Flaw | 28 Jan 202015:15 | – | prion |
![]() | CVE-2013-6455 | 28 Jan 202015:15 | – | nvd |
![]() | MediaWiki < 1.19.10 / 1.21.4 / 1.22.1 Multiple Vulnerabilities | 6 Feb 201400:00 | – | nessus |
[
{
"product": "MediaWiki",
"vendor": "Wikimedia Foundation",
"versions": [
{
"status": "affected",
"version": "before 1.19.10"
},
{
"status": "affected",
"version": "1.2x before 1.21.4"
},
{
"status": "affected",
"version": "1.22.x before 1.22.1"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo