Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

Information disclosure in Special:Redirect/logid

Disclosure Date: October 04, 2018 (last updated November 27, 2024)
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid
0
0
Attacker Value
Unknown

$wgRateLimits entry for 'user' overrides 'newbie'

Disclosure Date: October 04, 2018 (last updated November 27, 2024)
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.
0
0
Attacker Value
Unknown

BotPasswords can bypass CentralAuth's account lock

Disclosure Date: October 04, 2018 (last updated November 27, 2024)
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
0
0