CVE-2012-4382
CVE-2012-4382
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt.
CVSS 4.9 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.openwall.com/lists/oss-security/2012/08/31/6
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.html
- https://phabricator.wikimedia.org/T41823
- http://www.openwall.com/lists/oss-security/2012/08/31/10
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330
- https://nvd.nist.gov/vuln/detail/CVE-2012-4382