CVE-2011-4360

Fixed in a distro release EPSS 2%

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.

Published 2012-01-08 · CVE record · OSV

Products: mediawiki, debian_linux

Distro releases