MediaWiki Insufficiently Protected Credentials Vulnerability - CVE-2020-29005 - Vulnerability Database

MediaWiki Insufficiently Protected Credentials Vulnerability - CVE-2020-29005

High

Reference: CVE-2020-29005

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-29005

Title: MediaWiki Insufficiently Protected Credentials Vulnerability

Overview:

The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials allowing for potential information disclosure.