Description

The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group changes by page in recent changes and watchlist" is enabled, allows remote attackers to obtain sensitive information (revision-deleted IPs) via the Recent Changes page.

Remediation

References

CVE-2013-4569

Related Vulnerabilities

Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-1971)

WordPress Plugin Visual CSS Style Editor Security Bypass (7.1.9)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13762)

MySQL CVE-2022-21592 Vulnerability (CVE-2022-21592)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder Cross-Site Request Forgery (3.4.24.1)

Severity

Medium

Classification

CVE-2013-4569 CWE-200

Tags

Missing Update Known Vulnerabilities