Mediawiki · Mediawiki Centralauth Extension · CVE-2013-6455
Name of the Vulnerable Software and Affected Versions:
MediaWiki CentralAuth extension versions prior to 1.19.10
MediaWiki CentralAuth extension versions 1.2x prior to 1.21.4
MediaWiki CentralAuth extension versions 1.22.x prior to 1.22.1
Description:
The issue allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.
Recommendations:
For MediaWiki CentralAuth extension versions prior to 1.19.10, update to version 1.19.10 or later.
For MediaWiki CentralAuth extension versions 1.2x prior to 1.21.4, update to version 1.21.4 or later.
For MediaWiki CentralAuth extension versions 1.22.x prior to 1.22.1, update to version 1.22.1 or later.