EUVD-2014-9300

Malware in sbrugna...

CVE-2014-9481: Exposure of Sensitive Information to an Unauthorized Actor

The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML...

PT-2020-7776

Name of the Vulnerable Software and Affected Versions: MediaWiki Scribunto extension affected versions not specified Description: The issue allows remote attackers to obtain sensitive information, such as the rollback token, by using a crafted module. This is related to the unstripping of special...