PT-2012-1871
CVE-2011-4361
·
تاريخ النشر
2012-01-08
·
تاريخ التحديث
2021-04-21
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
MediaWiki versions prior to 1.17.1
Description
The issue allows remote attackers to obtain sensitive information by leveraging certain functions or extensions, such as the SpecialUpload::ajaxGetExistsWarning function, or extensions like CategoryTree, ExtTab, and InlineEditor, due to a lack of read permission checks for action=ajax requests.
Recommendations
For versions prior to 1.17.1, update to version 1.17.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾