CVE-2015-6727: Infoleak
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6727?
The severity of CVE-2015-6727 is considered moderate as it allows remote attackers to infer information about IP autoblocks.
How do I fix CVE-2015-6727?
To fix CVE-2015-6727, you should upgrade MediaWiki to version 1.23.10, 1.24.3, or 1.25.2 or later.
What versions of MediaWiki are affected by CVE-2015-6727?
Versions of MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 are affected by CVE-2015-6727.
What type of vulnerability is CVE-2015-6727?
CVE-2015-6727 is an information disclosure vulnerability that affects MediaWiki.
Can CVE-2015-6727 be exploited without authentication?
Yes, CVE-2015-6727 can potentially be exploited by remote attackers without authentication, making it a concern for exposed MediaWiki installations.