Description
MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2020-2757 Vulnerability (CVE-2020-2757)
Joomla! Core 3.9.x Cross-Site Scripting (3.9.0 - 3.9.23)
WordPress Plugin Twitter Button by BestWebSoft Cross-Site Request Forgery (2.14)
PHP Other Vulnerability (CVE-2001-1385)
Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-5419)