CVE-2013-6472: Infoleak
First published: Mon May 12 2014(Updated: )
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the (1) log API, (2) enhanced RecentChanges, and (3) user watchlists.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MediaWiki | =1.22.0 | |
| MediaWiki | <=1.19.9 | |
| MediaWiki | =1.19 | |
| MediaWiki | =1.19-beta_1 | |
| MediaWiki | =1.19-beta_2 | |
| MediaWiki | =1.19.0 | |
| MediaWiki | =1.19.1 | |
| MediaWiki | =1.19.2 | |
| MediaWiki | =1.19.3 | |
| MediaWiki | =1.19.4 | |
| MediaWiki | =1.19.5 | |
| MediaWiki | =1.19.6 | |
| MediaWiki | =1.19.7 | |
| MediaWiki | =1.19.8 | |
| MediaWiki | =1.21 | |
| MediaWiki | =1.21.1 | |
| MediaWiki | =1.21.2 | |
| MediaWiki | =1.21.3 | |
| =1.22.0 | ||
| <=1.19.9 | ||
| =1.19 | ||
| =1.19-beta_1 | ||
| =1.19-beta_2 | ||
| =1.19.0 | ||
| =1.19.1 | ||
| =1.19.2 | ||
| =1.19.3 | ||
| =1.19.4 | ||
| =1.19.5 | ||
| =1.19.6 | ||
| =1.19.7 | ||
| =1.19.8 | ||
| =1.21 | ||
| =1.21.1 | ||
| =1.21.2 | ||
| =1.21.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2013-6472?
CVE-2013-6472 has a medium severity rating because it allows remote attackers to gain information about deleted pages.
How do I fix CVE-2013-6472?
To fix CVE-2013-6472, you should upgrade to MediaWiki version 1.19.10 or later, 1.21.4 or later, or 1.22.1 or later.
What versions of MediaWiki are affected by CVE-2013-6472?
CVE-2013-6472 affects MediaWiki versions before 1.19.10, 1.21.x before 1.21.4, and 1.22.x before 1.22.1.
Can CVE-2013-6472 expose sensitive information?
Yes, CVE-2013-6472 can potentially expose sensitive information about deleted pages through several API endpoints.
Is there a workaround for CVE-2013-6472?
There is no documented workaround for CVE-2013-6472; upgrading to a patched version is recommended.
- agent/type
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/mediawiki
- canonical/mediawiki
- version/mediawiki/1.22.0
- version/mediawiki/1.19.9
- version/mediawiki/1.19
- version/mediawiki/1.19-beta_1
- version/mediawiki/1.19-beta_2
- version/mediawiki/1.19.0
- version/mediawiki/1.19.1
- version/mediawiki/1.19.2
- version/mediawiki/1.19.3
- version/mediawiki/1.19.4
- version/mediawiki/1.19.5
- version/mediawiki/1.19.6
- version/mediawiki/1.19.7
- version/mediawiki/1.19.8
- version/mediawiki/1.21
- version/mediawiki/1.21.1
- version/mediawiki/1.21.2
- version/mediawiki/1.21.3