The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki prior to 1.23.12, 1.24.x prior to 1.24.5, 1.25.x prior to 1.25.4, and 1.26.x prior to 1.26.1 allow remote malicious users to obtain sensitive user login information via crafted links combined with page view statistics.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mediawiki mediawiki 1.24.3 |
||
mediawiki mediawiki 1.24.4 |
||
mediawiki mediawiki 1.25.0 |
||
mediawiki mediawiki 1.25.1 |
||
mediawiki mediawiki |
||
mediawiki mediawiki 1.24.1 |
||
mediawiki mediawiki 1.25.3 |
||
mediawiki mediawiki 1.24.0 |
||
mediawiki mediawiki 1.24.2 |
||
mediawiki mediawiki 1.25.2 |
||
mediawiki mediawiki 1.26.0 |