CVE

Id
64516  
CVE No.
CVE-2013-4569  
Status
Candidate  
Description
The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group changes by page in recent changes and watchlist" is enabled, allows remote attackers to obtain sensitive information (revision-deleted IPs) via the Recent Changes page.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635900 64516 CVE-2013-4569 MLIST:[MediaWiki-announce] 20131114 MediaWiki Security Release: 1.21.3, 1.20.8 and 1.19.9  View
635901 64516 CVE-2013-4569 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-November/000135.html  View
635902 64516 CVE-2013-4569 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=54294  View
635903 64516 CVE-2013-4569 FEDORA:FEDORA-2013-21856  View
635904 64516 CVE-2013-4569 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123011.html  View
635905 64516 CVE-2013-4569 FEDORA:FEDORA-2013-21874  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24847 JVNDB-2013-006422 MediaWiki 用 TimeMediaHandler 拡張機能におけるクロスサイトスクリプティングの脆弱性 MediaWiki 用 TimeMediaHandler 拡張機能には、動画に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-4574 64516 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006422.html  View