CVE-2011-1580
CVE-2011-1580
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
EPSS 2.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html
- http://www.vupen.com/english/advisories/2011/0978
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html
- http://www.securityfocus.com/bid/47354
- http://secunia.com/advisories/44142
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html
- http://www.vupen.com/english/advisories/2011/1151
- http://www.debian.org/security/2011/dsa-2366
- https://bugzilla.redhat.com/show_bug.cgi?id=696360
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66739
- https://bugzilla.wikimedia.org/show_bug.cgi?id=28449
- http://www.vupen.com/english/advisories/2011/1100
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html
- https://bugzilla.redhat.com/show_bug.cgi?id=695577
- http://openwall.com/lists/oss-security/2011/04/13/15
- https://nvd.nist.gov/vuln/detail/CVE-2011-1580