CVE-2012-1581

Fixed in a distro release EPSS 2%

MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users.

Published 2012-09-09 · CVE record · OSV

Products: mediawiki

Distro releases