MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.

Several problems have been discovered in MediaWiki, a website engine for collaborative work.

  - CVE-2011-1578 CVE-2011-1587     Masato Kinugawa discovered a cross-site scripting (XSS)     issue, which affects Internet Explorer clients only, and     only version 6 and earlier. Web server configuration     changes are required to fix this issue. Upgrading     MediaWiki will only be sufficient for people who use     Apache with AllowOverride enabled.

  For details of the required configuration changes, see the upstream   announcements.

  - CVE-2011-1579     Wikipedia user Suffusion of Yellow discovered a CSS     validation error in the wikitext parser. This is an XSS     issue for Internet Explorer clients, and a privacy loss     issue for other clients since it allows the embedding of     arbitrary remote images.

  - CVE-2011-1580     MediaWiki developer Happy-Melon discovered that the     transwiki import feature neglected to perform access     control checks on form submission. The transwiki import     feature is disabled by default. If it is enabled, it     allows wiki pages to be copied from a remote wiki listed     in $wgImportSources. The issue means that any user can     trigger such an import to occur.

  - CVE-2011-4360     Alexandre Emsenhuber discovered an issue where page     titles on private wikis could be exposed bypassing     different page ids to index.php. In the case of the user     not having correct permissions, they will now be     redirected to Special:BadTitle.

  - CVE-2011-4361     Tim Starling discovered that action=ajax requests were     dispatched to the relevant function without any read     permission checks being done. This could have led to     data leakage on private wikis.

Detections

Analytics

CVE-2011-4360

medium

Tenable Plugins

medium