CVE-2012-4380
CVE-2012-4380
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors.
CVSS 7.5 · High · EPSS 1.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.openwall.com/lists/oss-security/2012/08/31/6
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.html
- http://www.openwall.com/lists/oss-security/2012/08/31/10
- https://bugzilla.redhat.com/show_bug.cgi?id=853440
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330
- https://phabricator.wikimedia.org/T41824
- https://nvd.nist.gov/vuln/detail/CVE-2012-4380