Lucene search
HistoryNov 09, 2015 - 6:59 p.m.
CVE-2015-8007
cve-2015-8007
echo extension
mediwiki
hideuser
vulnerability
nvd
8.8 High
AI Score
Confidence
High
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
46.3%
The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in “non-revision based” notifications, as demonstrated by viewing a hidden username in a Thanks notification.
Affected configurations
Node
echo_projectechomediawiki
| CPE | Name | Operator | Version |
|---|---|---|---|
| echo_project:echo | echo project echo | eq | * |
Related
nvd
nvd
CVE-2015-8007
2015-11-09 18:59:06
prion
prion
Design/Logic Flaw
2015-11-09 18:59:00
cvelist
cvelist
CVE-2015-8007
2015-11-09 18:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mediawiki-1.24.4-1.fc21
2015-11-05 21:50:58
[SECURITY] Fedora 22 Update: mediawiki-1.25.3-1.fc22
2015-11-05 23:27:59
[SECURITY] Fedora 23 Update: mediawiki-1.25.3-1.fc23
2015-11-05 22:26:54
openvas
openvas
Fedora Update for mediawiki FEDORA-2015-24
2015-11-06 00:00:00
Fedora Update for mediawiki FEDORA-2015-97
2015-11-06 00:00:00
nessus
nessus
Fedora 21 : mediawiki-1.24.4-1.fc21 (2015-97fe05f788)
2016-03-04 00:00:00
FreeBSD : mediawiki -- multiple vulnerabilities (b973a763-7936-11e5-a2a1-002590263bf5)
2015-10-23 00:00:00
Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)
2016-03-04 00:00:00
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2015-10-16 00:00:00
8.8 High
AI Score
Confidence
High
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
46.3%
Related for CVE-2015-8007