MediaWiki Multiple Remote Vulnerabilities
BID:55370
Info
MediaWiki Multiple Remote Vulnerabilities
| Bugtraq ID: | 55370 |
| Class: | Unknown |
| CVE: |
CVE-2012-4377 CVE-2012-4378 CVE-2012-4379 CVE-2012-4380 CVE-2012-4381 CVE-2012-4382 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 31 2012 12:00AM |
| Updated: | Aug 31 2012 12:00AM |
| Credit: | Writ Keeper and Fomafix of MediaWiki, and the vendor. |
| Vulnerable: |
MediaWiki Mediawiki 1.19.1 MediaWiki Mediawiki 1.18.4 MediaWiki Mediawiki 1.18.2 MediaWiki Mediawiki 1.18.1 MediaWiki Mediawiki 1.17.12 MediaWiki Mediawiki 1.17.5 MediaWiki Mediawiki 1.17.1 MediaWiki Mediawiki 1.17 MediaWiki MediaWiki 1.16.5 MediaWiki MediaWiki 1.16.4 MediaWiki MediaWiki 1.16.3 MediaWiki MediaWiki 1.16.2 MediaWiki Mediawiki 1.16.2 MediaWiki Mediawiki 1.16.1 MediaWiki MediaWiki 1.16.1 MediaWiki Mediawiki 1.16 MediaWiki Mediawiki 1.15.5 MediaWiki MediaWiki 1.15.5 MediaWiki MediaWiki 1.15.4 MediaWiki Mediawiki 1.15.4 MediaWiki Mediawiki 1.15.3 MediaWiki MediaWiki 1.15.3 MediaWiki MediaWiki 1.15.2 MediaWiki Mediawiki 1.15.2 MediaWiki Mediawiki 1.15.1 MediaWiki MediaWiki 1.15.1 MediaWiki MediaWiki 1.15 MediaWiki Mediawiki 1.15 MediaWiki Mediawiki 1.14.1 MediaWiki MediaWiki 1.14.1 MediaWiki MediaWiki 1.14 MediaWiki Mediawiki 1.14 MediaWiki Mediawiki 1.13.4 MediaWiki MediaWiki 1.13.4 MediaWiki MediaWiki 1.13.3 MediaWiki Mediawiki 1.13.3 MediaWiki Mediawiki 1.13.2 MediaWiki MediaWiki 1.13.2 MediaWiki MediaWiki 1.13.1 MediaWiki Mediawiki 1.13.1 MediaWiki MediaWiki 1.13 MediaWiki Mediawiki 1.13 MediaWiki Mediawiki 1.12.4 MediaWiki MediaWiki 1.12.4 MediaWiki Mediawiki 1.12.3 MediaWiki Mediawiki 1.12.2 MediaWiki MediaWiki 1.12.2 MediaWiki MediaWiki 1.12.1 MediaWiki Mediawiki 1.12.1 MediaWiki Mediawiki 1.12 MediaWiki MediaWiki 1.12 MediaWiki MediaWiki 1.11.2 MediaWiki Mediawiki 1.11.2 MediaWiki Mediawiki 1.11.1 MediaWiki MediaWiki 1.11.1 MediaWiki MediaWiki 1.11 MediaWiki Mediawiki 1.10.4 MediaWiki Mediawiki 1.10.3 MediaWiki MediaWiki 1.10.3 MediaWiki MediaWiki 1.10.2 MediaWiki MediaWiki 1.10.1 MediaWiki Mediawiki 1.10.1 MediaWiki Mediawiki 1.10 MediaWiki MediaWiki 1.16.0beta3 MediaWiki MediaWiki 1.16.0beta2 MediaWiki Mediawiki 1.16.0 Beta2 MediaWiki Mediawiki 1.16.0 Beta1 MediaWiki MediaWiki 1.16 MediaWiki Mediawiki 1.15.0 Rc1 MediaWiki Mediawiki 1.14.0 Rc1 MediaWiki Mediawiki 1.13.0 Rc2 MediaWiki Mediawiki 1.13.0 Rc1 MediaWiki Mediawiki 1.12.0 Rc1 MediaWiki MediaWiki 1.12 MediaWiki MediaWiki 1.11.0rc1 MediaWiki Mediawiki 1.11.0 Rc1 MediaWiki Mediawiki 1.11.0 MediaWiki Mediawiki 1.11 MediaWiki MediaWiki 1.11 MediaWiki Mediawiki 1.10.2 MediaWiki Mediawiki 1.10.0 Rc2 MediaWiki Mediawiki 1.10.0 Rc1 MediaWiki MediaWiki 1.10 MediaWiki Mediawiki 1.1.0 |
| Not Vulnerable: |
MediaWiki Mediawiki 1.19.2 MediaWiki Mediawiki 1.18.5 |
Discussion
MediaWiki Multiple Remote Vulnerabilities
MediaWiki is prone to multiple remote vulnerabilities. These issues include multiple HTML-injection vulnerabilities, a cross-site request-forgery vulnerability, and multiple security-bypass vulnerabilities.
An attacker can exploit these issues to steal cookie-based authentication credentials, perform unauthorized actions, or bypass certain security restrictions. Other attacks are also possible.
MediaWiki versions prior to 1.18.5 and 1.19.2 are vulnerable.
MediaWiki is prone to multiple remote vulnerabilities. These issues include multiple HTML-injection vulnerabilities, a cross-site request-forgery vulnerability, and multiple security-bypass vulnerabilities.
An attacker can exploit these issues to steal cookie-based authentication credentials, perform unauthorized actions, or bypass certain security restrictions. Other attacks are also possible.
MediaWiki versions prior to 1.18.5 and 1.19.2 are vulnerable.
Exploit / POC
MediaWiki Multiple Remote Vulnerabilities
An attacker can use a browser to exploit these issues. For a cross-site request-forgery attack, the attacker must entice an unsuspecting user to follow a malicious URI.
An attacker can use a browser to exploit these issues. For a cross-site request-forgery attack, the attacker must entice an unsuspecting user to follow a malicious URI.
Solution / Fix
MediaWiki Multiple Remote Vulnerabilities
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
MediaWiki Multiple Remote Vulnerabilities
References:
References:
- [MediaWiki-announce] MediaWiki security release: 1.19.2 and 1.18.5 (MediaWiki)
- MediaWiki Homepage (MediaWiki)
- Release notes/1.18 (MediaWiki)
- Release notes/1.19 (MediaWiki)
- Bug 37587 - character filter for uselang (Bugzilla)
- Bug 39180 - Edit tokens shown in frames using api (Bugzilla)
- Bug 39184 - Password data leakage when using external authentication (Bugzilla)
- Bug 39700 - A File: link to a non-existing image can inject html (Bugzilla)
- Bug 39823 - If a block log reason was rev-deleted, it is still visible for all a (Bugzilla)
- Bug 39824 - Account creation allowed despite IP blocked with the GlobalBlocking (Bugzilla)