SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

[Forgot Password]

Paid content will be excluded from the download.

Download | Alert*

CVE

CVE-2013-7444

Date: (C)2015-09-03 (M)2023-12-22

The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

FEDORA-2015-13920

https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html

http://www.openwall.com/lists/oss-security/2015/08/12/6

http://www.openwall.com/lists/oss-security/2015/08/27/6

https://github.com/wikimedia/mediawiki/commit/dc2966bd05b69321300c63fd0bd78e7c78ecea6e

https://phabricator.wikimedia.org/T48457

© SecPod Technologies