Lucene search
+L

3 matches found

OSV
OSV
added 2022/05/24 4:49 p.m.6 views

GHSA-X3FR-W7R5-X7RG MediaWiki Incorrect Access Control vulnerability

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

6.5CVSS6.2AI score0.0141EPSS
SaveExploits0References7
NVD
NVD
added 2019/07/10 5:15 p.m.20 views

CVE-2019-12469

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

6.5CVSS6.8AI score0.0141EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2019/04/23 12:0 a.m.69 views

mediawiki -- multiple vulnerabilities

Mediawiki reports: Security fixes: T197279, CVE-2019-12468: Directly POSTing to Special:ChangeEmail would allow for bypassing reauthentication, allowing for potential account takeover. T204729, CVE-2019-12473: Passing invalid titles to the API could cause a DoS by querying the entire watchlist...

9.8CVSS1.5AI score0.87218EPSS
SaveExploits4References1
Rows per page
Query Builder