Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2010-2787 - Vulnerability Database
MediaWiki

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2010-2787

Medium
Reference: CVE-2010-2787
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-2787
Title: MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.