tocsin

Debian/mediawiki: unknown

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.

Action: Upgrade mediawiki to 1:1.15.5-4 or later.

Affected

introducedfixedlast affected
01:1.15.5-4-

Fixed versions

1:1.15.5-4

Sources

published · modified · JSON