CVE-2011-4361

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.17.1

Description The issue allows remote attackers to obtain sensitive information by leveraging certain functions or extensions, such as the SpecialUpload::ajaxGetExistsWarning function, or extensions like CategoryTree, ExtTab, and InlineEditor, due to a lack of read permission checks for action=ajax requests.

Recommendations For versions prior to 1.17.1, update to version 1.17.1 or later to resolve the issue.