Description

The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.

Remediation

References

CVE-2015-6727

Related Vulnerabilities

Moodle Improper Authentication Vulnerability (CVE-2021-40693)

Oracle Database Server CVE-2013-5771 Vulnerability (CVE-2013-5771)

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Unspecified Vulnerability (5.0.09)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Information Disclosure (3.4.7)

WordPress Plugin Login as User or Customer Cross-Site Request Forgery (1.9)

Severity

Medium

Classification

CVE-2015-6727 CWE-200

Tags

Missing Update Known Vulnerabilities