Description
includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account, as demonstrated by tracking the victim's activity, related to a "login CSRF" issue.
Remediation
References
Related Vulnerabilities
WordPress Plugin Store Locator Plus for WordPress Privilege Escalation (5.5.14)
WordPress Plugin WP Social Feed Gallery Unspecified Vulnerability (2.1.1)
Joomla Insufficient Session Expiration Vulnerability (CVE-2021-26037)
Python Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-9233)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3190)