Wikimedia MediaWik exposed suppressed log in RevisionDelete page
Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12470US | medium6.5OT elevated | — | ||
Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12470.yamlWEB
- https://github.com/wikimedia/mediawikiPACKAGE
- https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2019-12470ADVISORY
- https://phabricator.wikimedia.org/T222038WEB
- https://seclists.org/bugtraq/2019/Jun/12WEB
- https://www.debian.org/security/2019/dsa-4460WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan