Описание
The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.
Ссылки
- PatchVendor Advisory
- Issue TrackingPatchVendor Advisory
- PatchVendor Advisory
- Issue TrackingPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.35 (включая)
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00655
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-319
Связанные уязвимости
CVSS3: 5.3
redhat
больше 5 лет назад
The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.
github
больше 4 лет назад
The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.
EPSS
Процентиль: 49%
0.00655
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-319