CVE-2019-12470

🗓️ 10 Jul 2019 17:12:15Reported by mitreType

Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed

Reporter	Title	Published	Views	Family All 20
OSV	CVE-2019-12470	10 Jul 201917:15	–	osv
OSV	mediawiki - security update	12 Jun 201900:00	–	osv
Github Security Blog	Wikimedia MediaWik exposed suppressed log in RevisionDelete page	24 May 202216:49	–	github
Cvelist	CVE-2019-12470	10 Jul 201916:04	–	cvelist
NVD	CVE-2019-12470	10 Jul 201917:15	–	nvd
Debian CVE	CVE-2019-12470	10 Jul 201917:15	–	debiancve
Friends Of PHP	Exposed suppressed log in RevisionDelete page	30 May 201920:55	–	friendsofphp
UbuntuCve	CVE-2019-12470	10 Jul 201900:00	–	ubuntucve
Veracode	Authorization Bypass	11 Jul 201905:54	–	veracode
Prion	Improper access control	10 Jul 201917:15	–	prion

Nvd

Node

mediawiki mediawikiRange<1.27.6

mediawiki mediawikiRange1.27.7–1.30.2

mediawiki mediawikiRange1.31.0–1.31.2

mediawiki mediawikiRange1.32.0–1.32.2

Node

debian debian_linuxMatch9.0

Source	Link
seclists	www.seclists.org/bugtraq/2019/Jun/12
debian	www.debian.org/security/2019/dsa-4460
phabricator	www.phabricator.wikimedia.org/T222038
lists	www.lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Jul 2019 17:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS36.5

EPSS0.002

CWE-862