Описание
The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.
Ссылки
- PatchVendor Advisory
- Issue TrackingPatchVendor Advisory
- PatchVendor Advisory
- Issue TrackingPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.35 (включая)
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.0009
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-319
Связанные уязвимости
CVSS3: 5.3
redhat
около 5 лет назад
The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.
github
больше 3 лет назад
The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.
EPSS
Процентиль: 26%
0.0009
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-319