CVE

Id
64248  
CVE No.
CVE-2013-4301  
Status
Candidate  
Description
includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a "<" (open angle bracket) character in the lang parameter to w/load.php, which reveals the installation path in an error message.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
633789 64248 CVE-2013-4301 MLIST:[MediaWiki-announce] 20130903 MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8  View
633790 64248 CVE-2013-4301 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html  View
633791 64248 CVE-2013-4301 MLIST:[oss-security] 20130904 Re: CVE request: MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8  View
633792 64248 CVE-2013-4301 URL:http://seclists.org/oss-sec/2013/q3/553  View
633793 64248 CVE-2013-4301 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=46332  View
633794 64248 CVE-2013-4301 CONFIRM:https://www.mediawiki.org/wiki/Release_notes/1.19  View
633795 64248 CVE-2013-4301 CONFIRM:https://www.mediawiki.org/wiki/Release_notes/1.20  View
633796 64248 CVE-2013-4301 CONFIRM:https://www.mediawiki.org/wiki/Release_notes/1.21  View
633797 64248 CVE-2013-4301 OSVDB:96913  View
633798 64248 CVE-2013-4301 URL:http://osvdb.org/96913  View
633799 64248 CVE-2013-4301 SECUNIA:54715  View
633800 64248 CVE-2013-4301 URL:http://secunia.com/advisories/54715  View
633801 64248 CVE-2013-4301 XF:mediawiki-cve20134301-info-disclosure(86895)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23042 JVNDB-2013-004617 MediaWiki 用 CheckUser 拡張機能の api/ApiQueryCheckUser.php におけるクロスサイトリクエストフォージェリの脆弱性 MediaWiki 用 CheckUser 拡張機能の api/ApiQueryCheckUser.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-4306 64248 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004617.html  View