Description

MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users.

Remediation

References

CVE-2012-1581

Related Vulnerabilities

MySQL CVE-2021-35618 Vulnerability (CVE-2021-35618)

Moodle CVE-2011-4301 Vulnerability (CVE-2011-4301)

WordPress Plugin Thrive Comments Security Bypass (1.4.15.2)

Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-36289)

Liferay Portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-42123)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2012-1581