Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-07-10T15:58:05
Updated: 2024-08-04T23:24:38.430Z
Reserved: 2019-05-30T00:00:00
Link: CVE-2019-12474
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-07-10T16:15:11.353
Modified: 2020-08-24T17:37:01.140
Link: CVE-2019-12474
Redhat
No data.