Vulnerability Details CVE-2013-7444
The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.7%
CVSS Severity
CVSS v2 Score 5.0
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html
- http://www.openwall.com/lists/oss-security/2015/08/12/6
- http://www.openwall.com/lists/oss-security/2015/08/27/6
- https://github.com/wikimedia/mediawiki/commit/dc2966bd05b69321300c63fd0bd78e7c78ecea6e
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html
- https://phabricator.wikimedia.org/T48457
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html
- http://www.openwall.com/lists/oss-security/2015/08/12/6
- http://www.openwall.com/lists/oss-security/2015/08/27/6
- https://github.com/wikimedia/mediawiki/commit/dc2966bd05b69321300c63fd0bd78e7c78ecea6e
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html
- https://phabricator.wikimedia.org/T48457
Products affected by CVE-2013-7444
-
cpe:2.3:a:mediawiki:mediawiki:1.10.0
-
cpe:2.3:a:mediawiki:mediawiki:1.11.0
-
cpe:2.3:a:mediawiki:mediawiki:1.12.0
-
cpe:2.3:a:mediawiki:mediawiki:1.13.0
-
cpe:2.3:a:mediawiki:mediawiki:1.14.0
-
cpe:2.3:a:mediawiki:mediawiki:1.15.0
-
cpe:2.3:a:mediawiki:mediawiki:1.17.0
-
cpe:2.3:a:mediawiki:mediawiki:1.18.0
-
cpe:2.3:a:mediawiki:mediawiki:1.19.0
-
cpe:2.3:a:mediawiki:mediawiki:1.2.0
-
cpe:2.3:a:mediawiki:mediawiki:1.20.0
-
cpe:2.3:a:mediawiki:mediawiki:1.22.0
-
cpe:2.3:a:mediawiki:mediawiki:1.4.0
-
cpe:2.3:a:mediawiki:mediawiki:1.5.0
-
cpe:2.3:a:mediawiki:mediawiki:1.9.0