Description

The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group changes by page in recent changes and watchlist" is enabled, allows remote attackers to obtain sensitive information (revision-deleted IPs) via the Recent Changes page.

Remediation

References

CVE-2013-4569

Related Vulnerabilities

WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Cross-Site Request Forgery (3.4.1)

Drupal Core 6.x Denial of Service (6.0 - 6.32)

WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Cross-Site Scripting (4.19.2)

WordPress Plugin Trashbin 'mtb_undelete' Parameter Cross-Site Scripting (0.1)

Coppermine Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3486)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2013-4569