CVE-2012-4380: High severity MediaWiki MediaWiki vulnerability
A security flaw was found in the way MediaWiki, a wiki engine, performed account creation capability validation for certain IP addresses (IP addresses blocked with GlobalBlocking extension were incorrectly still allowed to create new user accounts). A remote attacker could use this flaw to circumvent the GlobalBlocking account creation prevention mechanism.
References: [1] http://www.gossamer-threads.com/lists/wiki/mediawiki/295767
Upstream bug: [2] https://bugzilla.wikimedia.org/showbug.cgi?id=39824
Upstream patch against the 1.18 version: [3] https://bugzilla.wikimedia.org/showbug.cgi?id=39824#c0
Other sources
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4380?
CVE-2012-4380 has a medium severity rating due to its impact on user account creation.
How do I fix CVE-2012-4380?
To fix CVE-2012-4380, upgrade MediaWiki to version 1.18.5 or 1.19.2 or later.
What software versions are affected by CVE-2012-4380?
CVE-2012-4380 affects MediaWiki versions before 1.18.5 and 1.19.x before 1.19.2.
Can CVE-2012-4380 be exploited remotely?
Yes, CVE-2012-4380 can be exploited remotely to bypass IP address blocking.
What is the impact of CVE-2012-4380?
CVE-2012-4380 allows remote attackers to create user accounts without restriction.