CVE-2011-4360
CVE-2011-4360
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.
EPSS 2.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html
- https://bugzilla.redhat.com/show_bug.cgi?id=758171
- http://openwall.com/lists/oss-security/2011/11/29/6
- https://bugzilla.wikimedia.org/show_bug.cgi?id=32276
- http://openwall.com/lists/oss-security/2011/11/29/12
- http://www.debian.org/security/2011/dsa-2366
- https://nvd.nist.gov/vuln/detail/CVE-2011-4360