Description

MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users.

Remediation

References

CVE-2012-1581

Related Vulnerabilities

Moodle Improper Access Control Vulnerability (CVE-2016-8643)

concrete5 Server-Side Request Forgery (SSRF) Vulnerability (CVE-2018-13790)

Oracle Application Server Other Vulnerability (CVE-2009-0217)

Sqlite Numeric Truncation Error Vulnerability (CVE-2025-6965)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1394)

Severity

Medium

Classification

CVE-2012-1581 CWE-264

Tags

Missing Update Known Vulnerabilities