Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-2032
5
MEDIUMCVSS v2
Published
November 18, 2013
Affected
4 projects
Assigned by
Red Hat
Severity scale
010
Description
MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attackers to bypass the intended restrictions of an extension that only implements one of these blocks.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.16.0, = 1.19, = 1.12.1, = 1.17.1, = 1.13.0, = 1.14.0, = 1.20.1, = 1.11.0, = 1.19.3, = 1.19.1, = 1.15.1, = 1.15.0, = 1.12.0, = 1.17, = 1.16.1, = 1.13.4, = 1.20.2, = 1.18, = 1.15.3, = 1.12.3, = 1.20.4, = 1.10.0, = 1.18.3, = 1.18.1, = 1.18.0, = 1.17.2, = 1.13.1, = 1.10.3, = 1.10.1, = 1.19.0, = 1.16.2, = 1.13.3, = 1.13.2, = 1.11, = 1.10.4, = 1.20.3, <= 1.19.5, = 1.17.4, = 1.17.3, = 1.15.5, = 1.15.4, = 1.15.2, = 1.12.4, = 1.1.0, = 1.19.4, = 1.18.2, = 1.17.0, = 1.11.2, = 1.10.2, = 1.11.1, = 1.12.2, = 1.19.2, = 1.14.1NVD
mediawikiPython Package IndexMediaWiki Syntax to HTML
Python Package IndexMediaWiki Syntax to HTML= 1.16.0, = 1.19, = 1.12.1, = 1.17.1, = 1.13.0, = 1.14.0, = 1.20.1, = 1.11.0, = 1.19.3, = 1.19.1, = 1.15.1, = 1.15.0, = 1.12.0, = 1.17, = 1.16.1, = 1.13.4, = 1.20.2, = 1.18, = 1.15.3, = 1.12.3, = 1.20.4, = 1.10.0, = 1.18.3, = 1.18.1, = 1.18.0, = 1.17.2, = 1.13.1, = 1.10.3, = 1.10.1, = 1.19.0, = 1.16.2, = 1.13.3, = 1.13.2, = 1.11, = 1.10.4, = 1.20.3, <= 1.19.5, = 1.17.4, = 1.17.3, = 1.15.5, = 1.15.4, = 1.15.2, = 1.12.4, = 1.1.0, = 1.19.4, = 1.18.2, = 1.17.0, = 1.11.2, = 1.10.2, = 1.11.1, = 1.12.2, = 1.19.2, = 1.14.1
NPM
RubyGems