CVE-2013-7444 - The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text

MEDIUM

The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text

Published Sep 1, 2015

5.0

MEDIUM

CVSS 2.0

EPSS 2.32%

The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

Link	Providers	Tags
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html		vendor-advisoryx_refsource_FEDORA
http://www.openwall.com/lists/oss-security/2015/08/12/6		mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2015/08/27/6		mailing-listx_refsource_MLIST
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-7208		Advisory
https://github.com/wikimedia/mediawiki/commit/dc2966bd05b69321300c63fd0bd78e7c78ecea6e		x_refsource_CONFIRM
https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html		mailing-listx_refsource_MLISTVendor Advisory
https://phabricator.wikimedia.org/T48457		x_refsource_CONFIRM