Description

The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.

Remediation

References

CVE-2013-6455

Related Vulnerabilities

WordPress Plugin WPCS-WordPress Currency Switcher Cross-Site Request Forgery (1.1.6)

WordPress Plugin iQ Block Country Cross-Site Scripting (1.1.19)

Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2065)

Oracle JRE CVE-2012-5068 Vulnerability (CVE-2012-5068)

Oracle HTTP Server Other Vulnerability (CVE-2006-5350)

Severity

Medium

Classification

CVE-2013-6455 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities