CVE-2013-7444 — Sensitive Information Exposure in Mediawiki

CWE-200 — Sensitive Information Exposure5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 36.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MediawikiDebian Mediawiki
Timeline
PublishedSep 1
Latest updateMay 17

Description

The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/mediawiki< mediawiki 1:1.25.5-1 (bookworm)
▶Debianmediawiki/mediawiki< 1:1.25.5-1+3

🔴Vulnerability Details

2
GHSA
GHSA-9gx3-9j25-7h5c: The Special:Contributions page in MediaWiki before 1↗2022-05-17
▶
OSV
CVE-2013-7444: The Special:Contributions page in MediaWiki before 1↗2015-09-01
▶

📋Vendor Advisories

1
Debian
CVE-2013-7444: mediawiki - The Special:Contributions page in MediaWiki before 1.22.0 allows remote attacker...↗2013
▶

💬Community

1
Bugzilla
CVE-2013-7444 CVE-2015-6737 CVE-2015-6736 CVE-2015-6727 CVE-2015-6733 CVE-2015-6732 CVE-2015-6731 CVE-2015-6730 CVE-2015-6728 CVE-2015-6729 CVE-2015-6735 CVE-2015-6734 mediawiki: multiple security fix↗2015-08-13
▶
CVE-2013-7444 — Sensitive Information Exposure | cvebase