Vulnerability in Mediawiki

CVE-2012-5395

Session fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the centralauth_Session cookie.

EPSS: 0.012 (63.9th percentile) — read the EPSS interpretation.

Affected products

  • Mediawiki — versions 1.20, 1.19, 1.19.1
  • N/a — versions n/a

References