Описание
An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,
Ссылки
- Vendor Advisory
- Vendor Advisory
- Permissions Required
- Vendor Advisory
- Vendor Advisory
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия до 1.37.2 (включая)
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.0037
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 5.5
redhat
почти 4 года назад
An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,
CVSS3: 7.5
github
почти 4 года назад
An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,
EPSS
Процентиль: 58%
0.0037
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
NVD-CWE-noinfo