Vulnerability Description
MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mediawiki | Mediawiki | < 1.19.4 |
| Debian | Debian Linux | 9.0 |
| Redhat | Enterprise Linux | 6.0 |
| Fedoraproject | Fedora | 18 |
Related Weaknesses (CWE)
References
- http://security.gentoo.org/glsa/glsa-201310-21.xmlThird Party Advisory
- http://www.openwall.com/lists/oss-security/2013/03/05/4Mailing ListRelease NotesThird Party Advisory
- http://www.securityfocus.com/bid/58305Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1817Issue TrackingThird Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88359Third Party AdvisoryVDB Entry
- https://security-tracker.debian.org/tracker/CVE-2013-1817Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201310-21.xmlThird Party Advisory
- http://www.openwall.com/lists/oss-security/2013/03/05/4Mailing ListRelease NotesThird Party Advisory
- http://www.securityfocus.com/bid/58305Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1817Issue TrackingThird Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88359Third Party AdvisoryVDB Entry
- https://security-tracker.debian.org/tracker/CVE-2013-1817Third Party Advisory
FAQ
What is CVE-2013-1817?
CVE-2013-1817 is a vulnerability with a CVSS score of 7.5 (HIGH). MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.
How severe is CVE-2013-1817?
CVE-2013-1817 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-1817?
Check the references section above for vendor advisories and patch information. Affected products include: Mediawiki Mediawiki, Debian Debian Linux, Redhat Enterprise Linux, Fedoraproject Fedora.