CVE-2019-12470

Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
References
Link Resource
https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html Mailing List Release Notes Vendor Advisory
https://www.debian.org/security/2019/dsa-4460 Third Party Advisory
https://seclists.org/bugtraq/2019/Jun/12 Issue Tracking Mailing List Third Party Advisory
https://phabricator.wikimedia.org/T222038 Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Information

Published : 2019-07-10 10:15

Updated : 2020-08-24 10:37


NVD link : CVE-2019-12470

Mitre link : CVE-2019-12470


JSON object : View

CWE
CWE-862

Missing Authorization

Advertisement

dedicated server usa

Products Affected

debian

  • debian_linux

mediawiki

  • mediawiki