NVD

Id
8510  
Name
CVE-2011-1580  
Description
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-04-26  
Modified Date
2012-01-18  
Seq
2011-1580  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48921 8510 CVE-2011-1580 FEDORA-2011-5495  View
48922 8510 CVE-2011-1580 FEDORA-2011-5848  View
48923 8510 CVE-2011-1580 FEDORA-2011-5812  View
48924 8510 CVE-2011-1580 FEDORA-2011-5807  View
48925 8510 CVE-2011-1580 [mediawiki-announce] 20110412 MediaWiki security release 1.16.3  View
48926 8510 CVE-2011-1580 [oss-security] 20110413 Re: CVE request: mediawiki 1.16.3  View
48927 8510 CVE-2011-1580 DSA-2366  View
48928 8510 CVE-2011-1580 47354  View
48929 8510 CVE-2011-1580 ADV-2011-0978  View
48930 8510 CVE-2011-1580 ADV-2011-1100  View
48931 8510 CVE-2011-1580 ADV-2011-1151  View
48932 8510 CVE-2011-1580 mediawiki-transwiki-sec-bypass(66739)  View
48933 8510 CVE-2011-1580 https://bugzilla.redhat.com/show_bug.cgi?id=695577  View
48934 8510 CVE-2011-1580 https://bugzilla.redhat.com/show_bug.cgi?id=696360  View
48935 8510 CVE-2011-1580 https://bugzilla.wikimedia.org/show_bug.cgi?id=28449  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34211 JVNDB-2011-004453 MediaWiki の transwiki import 機能における wgImportSources wiki からインポートを実行される脆弱性 MediaWiki の transwiki import 機能は、適切に権限をチェックしないため、wgImportSources wiki からインポートを実行される脆弱性が存在します。 CVE-2011-1580 49487 CVE-2011-1580 8510 3.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004453.html 2011-04-26 2012-03-27 View