Information disclosure in MediaWiki

CVE-2013-6472

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the (1) log API, (2) enhanced RecentChanges, and (3) user watchlists.

Vulnerability class: Information Disclosure

EPSS: 0.013 (66.8th percentile) — read the EPSS interpretation.

Affected products

  • Mediawiki — versions 1.22.0, 1.19, 1.19.0
  • N/a — versions n/a

Weakness classification (CWE)

References