Description

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt.

Remediation

References

CVE-2012-4382

Related Vulnerabilities

Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-7196)

Oracle Database Server CVE-2010-4423 Vulnerability (CVE-2010-4423)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13094)

WordPress Plugin wp superb Slideshow Arbitrary File Upload (2.4)

Joomla Other Vulnerability (CVE-2006-1030)

Severity

Medium

Classification

CVE-2012-4382 CWE-200 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities