CVE-2013-6455

{"containers": {"cna": {"affected": [{"product": "MediaWiki", "vendor": "Wikimedia Foundation", "versions": [{"status": "affected", "version": "before 1.19.10"}, {"status": "affected", "version": "1.2x before 1.21.4"}, {"status": "affected", "version": "1.22.x before 1.22.1"}]}], "datePublic": "2014-01-14T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page."}], "problemTypes": [{"descriptions": [{"description": "Path Disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-01-28T14:54:22.000Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2013-6455", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "MediaWiki", "version": {"version_data": [{"version_value": "before 1.19.10"}, {"version_value": "1.2x before 1.21.4"}, {"version_value": "1.22.x before 1.22.1"}]}}]}, "vendor_name": "Wikimedia Foundation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Path Disclosure"}]}]}, "references": {"reference_data": [{"name": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html", "refsource": "MISC", "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T17:39:01.461Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2013-6455", "datePublished": "2020-01-28T14:54:22.000Z", "dateReserved": "2013-11-04T00:00:00.000Z", "dateUpdated": "2024-08-06T17:39:01.461Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "MediaWiki", "vendor": "Wikimedia Foundation", "versions": [{"status": "affected", "version": "before 1.19.10"}, {"status": "affected", "version": "1.2x before 1.21.4"}, {"status": "affected", "version": "1.22.x before 1.22.1"}]}], "source": "secalert@redhat.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD89BE0F-27F6-4550-816C-78645DA93431", "versionEndExcluding": "1.19.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "matchCriteriaId": "084F0F91-851A-4EC5-AEEE-15CAB104E58B", "versionEndExcluding": "1.21.4", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "matchCriteriaId": "A18AC051-E349-4B6E-B4E1-7C33AC78115A", "versionEndExcluding": "1.22.1", "versionStartIncluding": "1.22.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page."}, {"lang": "es", "value": "La extensi\u00f3n CentralAuth para MediaWiki versiones anteriores a 1.19.10, versiones 1.2x anteriores a 1.21.4 y versiones 1.22.x anteriores a 1.22.1, permite a atacantes remotos obtener nombres de usuario por medio de vectores relacionados con la escritura de los nombres en el DOM de una p\u00e1gina."}], "id": "CVE-2013-6455", "lastModified": "2026-06-17T00:00:31.620", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-01-28T15:15:14.703", "references": [{"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}