CVE-2012-4382
Fixed in a distro release EPSS 1%
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt.
Products: mediawiki
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mediawiki | 1:1.19.2-1 |
| Debian 13 | mediawiki | 1:1.19.2-1 |
| Debian 14 | mediawiki | 1:1.19.2-1 |