Lucene search
+L

4 matches found

OSV
OSV
•added 2022/05/24 4:49 p.m.•8 views

GHSA-X3FR-W7R5-X7RG MediaWiki Incorrect Access Control vulnerability

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

6.5CVSS6.2AI score0.01372EPSS
SaveExploits0References7
NVD
NVD
•added 2019/07/10 5:15 p.m.•25 views

CVE-2019-12469

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

6.5CVSS6.8AI score0.01372EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/10 12:00 a.m.•4 views

CVE-2019-12469: Missing Authorization

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

6.5CVSS7.5AI score0.01372EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2019/04/23 12:00 a.m.•73 views

mediawiki -- multiple vulnerabilities

Mediawiki reports: Security fixes: T197279, CVE-2019-12468: Directly POSTing to Special:ChangeEmail would allow for bypassing reauthentication, allowing for potential account takeover. T204729, CVE-2019-12473: Passing invalid titles to the API could cause a DoS by querying the entire watchlist...

9.8CVSS6.4AI score0.8682EPSS
SaveExploits4References1
Rows per page
Query Builder