CVE-2015-6727
published 2015-09-01CVE-2015-6727: The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP…
PriorityP426medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
2.32%
81.7th percentile
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| debian | mediawiki | < mediawiki 1:1.25.5-1 (bookworm) | mediawiki 1:1.25.5-1 (bookworm) |
| mediawiki | mediawiki | <= 1.23.9 | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | >= 0 < 1:1.25.5-1 | 1:1.25.5-1 |
| mediawiki | mediawiki | >= 0 < 1:1.25.5-1 | 1:1.25.5-1 |
| mediawiki | mediawiki | >= 0 < 1:1.25.5-1 | 1:1.25.5-1 |
| mediawiki | mediawiki | >= 0 < 1:1.25.5-1 | 1:1.25.5-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v8xm-gjch-p94q: The Special:DeletedContributions page in MediaWiki before 1
ghsa_unreviewed·2022-05-17
CVE-2015-6727 [MEDIUM] CWE-200 GHSA-v8xm-gjch-p94q: The Special:DeletedContributions page in MediaWiki before 1
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
OSV
CVE-2015-6727: The Special:DeletedContributions page in MediaWiki before 1
osv·2015-09-01·CVSS 5.0
CVE-2015-6727 [MEDIUM] CVE-2015-6727: The Special:DeletedContributions page in MediaWiki before 1
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
Debian
CVE-2015-6727: mediawiki - The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before...
vendor_debian·2015·CVSS 5.0
CVE-2015-6727 [MEDIUM] CVE-2015-6727: mediawiki - The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before...
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
Scope: local
bookworm: resolved (fixed in 1:1.25.5-1)
bullseye: resolved (fixed in 1:1.25.5-1)
forky: resolved (fixed in 1:1.25.5-1)
sid: resolved (fixed in 1:1.25.5-1)
trixie: resolved (fixed in 1:1.25.5-1)
No detection rules found.
No public exploits indexed.
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.htmlhttp://www.openwall.com/lists/oss-security/2015/08/12/6http://www.openwall.com/lists/oss-security/2015/08/27/6https://github.com/wikimedia/mediawiki/commit/5faabfa1bbf65536ea36108887040198afcb3c82https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.htmlhttps://phabricator.wikimedia.org/T106893http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.htmlhttp://www.openwall.com/lists/oss-security/2015/08/12/6http://www.openwall.com/lists/oss-security/2015/08/27/6https://github.com/wikimedia/mediawiki/commit/5faabfa1bbf65536ea36108887040198afcb3c82https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.htmlhttps://phabricator.wikimedia.org/T106893
2015-09-01
Published