Description

The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.

Remediation

References

CVE-2013-6455

Related Vulnerabilities

WordPress Plugin GoCodes Multiple Vulnerabilities (1.3.5)

WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Security Bypass (0.1.0.38)

Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10678)

WebLogic CVE-2018-3201 Vulnerability (CVE-2018-3201)

WordPress Plugin College publisher Import Arbitrary File Upload (0.1)

Severity

Medium

Classification

CVE-2013-6455 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities