CVE-2012-1579: Infoleak
Published Sep 9, 2012
·Updated
The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript file, which allows remote attackers to obtain sensitive information.
Affected Software
11 affected components
MediaWiki MediaWiki=1.17
MediaWiki MediaWiki=1.17-beta_1
MediaWiki MediaWiki=1.17.0
MediaWiki MediaWiki=1.17.0-rc1
MediaWiki MediaWiki=1.17.1
MediaWiki MediaWiki=1.17.2
MediaWiki MediaWiki=1.18
MediaWiki MediaWiki=1.18-beta_1
MediaWiki MediaWiki=1.18.0
MediaWiki MediaWiki=1.18.0-rc1
MediaWiki MediaWiki=1.18.1
Event History
Sep 9, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability CVE-2012-1579 about?
CVE-2012-1579 involves a flaw in MediaWiki that exposes sensitive information, such as CSRF tokens, in JavaScript files.
2
What is the severity of CVE-2012-1579?
The severity of CVE-2012-1579 is considered to be moderate due to the potential for leaking sensitive information.
3
How do I fix CVE-2012-1579?
To fix CVE-2012-1579, upgrade to MediaWiki versions 1.17.3 or 1.18.2 or later.
4
Which versions of MediaWiki are affected by CVE-2012-1579?
MediaWiki versions 1.17.x before 1.17.3 and 1.18.x before 1.18.2 are affected by CVE-2012-1579.
5
What type of attack can CVE-2012-1579 enable?
CVE-2012-1579 can enable remote attackers to obtain private data through JavaScript, potentially leading to unauthorized actions.