CVE-2013-1817 — Sensitive Information Exposure in Mediawiki

CWE-200 — Sensitive Information Exposure7 documents5 sources
Severity
7.5HIGHNVD
EPSS
1.6%
top 18.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
MediawikiDebian MediawikiDebian Linux+2 more
Timeline
PublishedNov 20
Latest updateMay 5

Description

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/mediawiki< mediawiki 1:1.19.4-1 (bookworm)
▶NVDmediawiki/mediawiki1.20.0 — 1.20.3+1
▶Debianmediawiki/mediawiki< 1:1.19.4-1+3
▶CVEListV5mediawiki/mediawiki1.19.4, 1.20.3+1

Also affects: Debian Linux 10.0, 9.0, Fedora 18, Enterprise Linux 6.0

🔴Vulnerability Details

2
GHSA
GHSA-jx28-fr4j-chqw: MediaWiki before 1↗2022-05-05
▶
OSV
CVE-2013-1817: MediaWiki before 1↗2019-11-20
▶

📋Vendor Advisories

1
Debian
CVE-2013-1817: mediawiki - MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.ph...↗2013
▶

💬Community

3
Bugzilla
CVE-2013-1816 CVE-2013-1817 mediawiki119 various flaws [epel-6]↗2013-03-05
▶
Bugzilla
CVE-2013-1817 MediaWiki: API action=unblock should return the user name, not the full user object↗2013-03-05
▶
Bugzilla
CVE-2013-1816 CVE-2013-1817 mediawiki119 various flaws [fedora-18]↗2013-03-05
▶
CVE-2013-1817 — Sensitive Information Exposure | cvebase