Description

The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.

Remediation

References

CVE-2015-6727

Related Vulnerabilities

WebLogic Improper Certificate Validation Vulnerability (CVE-2020-9488)

concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-19146)

WordPress Plugin Contact Form DB-Elementor Cross-Site Scripting (1.7)

WordPress Plugin Scoutnet Kalender Cross-Site Scripting (1.1.0)

WordPress Plugin myEASYbackup 'dwn_file' Parameter Directory Traversal (1.0.8.1)

Severity

Medium

Classification

CVE-2015-6727 CWE-200

Tags

Missing Update Known Vulnerabilities