Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext.

Remediation

References

CVE-2017-0361

Related Vulnerabilities

Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-8114)

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.21)

PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2016-5424)

WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.5.0)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.1.3)

Severity

High

Classification

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2017-0361