MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2013-6455 - Vulnerability Database

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2013-6455

Medium
Reference: CVE-2013-6455
Title: MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

The CentralAuth extension for MediaWiki before 1.19.10 1.2x before 1.21.4 and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.