First published: Thu Jun 06 2019(Updated: )
Exposed suppressed username or log in Special:EditTags
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
composer/mediawiki/core | >=1.27.0<1.27.6>=1.30.0<1.30.2>=1.31.0<1.31.2>=1.32.0<1.32.2 | |
debian/mediawiki | 1:1.31.16-1+deb10u2 1:1.31.16-1+deb10u6 1:1.35.11-1~deb11u1 1:1.35.13-1~deb11u1 1:1.39.4-1~deb12u1 1:1.39.5-1~deb12u1 1:1.39.5-1 | |
composer/mediawiki/core | >=1.32.0<1.32.2 | 1.32.2 |
composer/mediawiki/core | >=1.31.0<1.31.2 | 1.31.2 |
composer/mediawiki/core | >=1.30.0<1.30.2 | 1.30.2 |
composer/mediawiki/core | >=1.27.0<1.27.6 | 1.27.6 |
Wikimedia MediaWiki | <1.27.6 | |
Wikimedia MediaWiki | >=1.27.7<1.30.2 | |
Wikimedia MediaWiki | >=1.31.0<1.31.2 | |
Wikimedia MediaWiki | >=1.32.0<1.32.2 | |
Debian GNU/Linux | =9.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2019-12469 is assessed as moderate due to incorrect access control exposing suppressed usernames.
To fix CVE-2019-12469, upgrade to MediaWiki version 1.32.2, 1.31.2, 1.30.2, or 1.27.6.
CVE-2019-12469 affects MediaWiki versions below 1.32.2, 1.31.2, 1.30.2, and 1.27.6.
Systems running MediaWiki versions between 1.27.0 and 1.32.1 are vulnerable to CVE-2019-12469.
CVE-2019-12469 is not considered critical but poses a risk due to exposure of sensitive username information.