PT-2020-7503
CVE-2013-4572
·
تاريخ النشر
2013-12-12
·
تاريخ التحديث
2020-02-10
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
MediaWiki CentralNotice extension versions 1.19.x through 1.19.8
MediaWiki CentralNotice extension versions 1.20.x through 1.20.7
MediaWiki CentralNotice extension versions 1.21.x through 1.21.2
Description:
The issue allows remote attackers to authenticate as a created user due to the Cache-Control header setting to cache session cookies when a user is autocreated.
Recommendations:
For versions 1.19.x through 1.19.8, update to version 1.19.9 or later.
For versions 1.20.x through 1.20.7, update to version 1.20.8 or later.
For versions 1.21.x through 1.21.2, update to version 1.21.3 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾