CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Veracode•added 2019/07/11 10:36 a.m.•22 views

Insecure Access Controls

mediawiki/core uses insecure access controls. Unauthorized users are able to retrieve suppressed username or log in Special:EditTags information...

6.5CVSS7.8AI score0.0141EPSS

Exploits0References4Affected Software2

NVD•added 2019/07/10 5:15 p.m.•20 views

CVE-2019-12469

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

6.5CVSS6.8AI score0.0141EPSS

Exploits0References4

Prion•added 2019/07/10 5:15 p.m.•25 views

Design/Logic Flaw

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

4CVSS7.1AI score0.0141EPSS

Exploits0References4Affected Software2

CVE•added 2019/07/10 4:1 p.m.•128 views

CVE-2019-12469

CVE-2019-12469 (MediaWiki) : Affected versions are MediaWiki up to 1.32.1. The issue is an Incorrect Access Control that exposes suppressed usernames or login status on Special:EditTags. Root cause is an access-control weakness in how EditTags visibility is enforced. Impact is information disclos...

6.5CVSS6.4AI score0.0141EPSS

Exploits0References4Affected Software1