tocsin

Debian/mediawiki: unknown

api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive informatio

Action: Upgrade mediawiki to 1:1.15.5-1 or later.

Affected

introducedfixedlast affected
01:1.15.5-1-

Fixed versions

1:1.15.5-1

Sources

published · modified · JSON