Description

The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.

Remediation

References

CVE-2013-6455

Related Vulnerabilities

WordPress Plugin JVM WooCommerce Wishlist Unspecified Vulnerability (1.2.6)

WordPress Plugin WHMCS Bridge Cross-Site Scripting (6.2)

MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1581)

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60313)

Oracle Database Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-3132)

Severity

Medium

Classification

CVE-2013-6455 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities