CVE-2013-6472: Infoleak
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the (1) log API, (2) enhanced RecentChanges, and (3) user watchlists.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6472?
CVE-2013-6472 has a medium severity rating because it allows remote attackers to gain information about deleted pages.
How do I fix CVE-2013-6472?
To fix CVE-2013-6472, you should upgrade to MediaWiki version 1.19.10 or later, 1.21.4 or later, or 1.22.1 or later.
What versions of MediaWiki are affected by CVE-2013-6472?
CVE-2013-6472 affects MediaWiki versions before 1.19.10, 1.21.x before 1.21.4, and 1.22.x before 1.22.1.
Can CVE-2013-6472 expose sensitive information?
Yes, CVE-2013-6472 can potentially expose sensitive information about deleted pages through several API endpoints.
Is there a workaround for CVE-2013-6472?
There is no documented workaround for CVE-2013-6472; upgrading to a patched version is recommended.