CVE-2020-25869: High severity mediawiki vulnerability
Published Sep 27, 2020
·Updated
An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of actor ID does not necessarily use the correct database or correct wiki.
Affected Software
3 affected components
MediaWiki<1.31.10
MediaWiki>=1.32.0<1.34.4
fedoraproject fedora=33
Event History
Sep 27, 2020
CVE Published
via MITRE·08:40 PM
Data Sourced
via MITRE·08:40 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-25869?
CVE-2020-25869 is considered a medium severity vulnerability due to the potential for information leakage.
2
How do I fix CVE-2020-25869?
To fix CVE-2020-25869, upgrade MediaWiki to version 1.31.10 or 1.34.4 or later.
3
Which versions of MediaWiki are affected by CVE-2020-25869?
CVE-2020-25869 affects MediaWiki versions prior to 1.31.10 and 1.32.0 to 1.34.4.
4
What type of vulnerability is CVE-2020-25869?
CVE-2020-25869 is an information leak vulnerability related to improper handling of actor IDs.
5
Can CVE-2020-25869 impact database security?
Yes, CVE-2020-25869 can lead to unauthorized access to sensitive information stored in the database.