CVE-2013-6455

The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.

Score

CVSS 3.1 5.3 Medium

Status

Modified - secalert@redhat.com

Published

2020-01-28

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Mediawiki (Mediawiki)
• Mediawiki (Wikimedia Foundation)

References

• http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html