CVE-2010-2787

api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access…

published April 27, 2011

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01645 · 76.3th percentile
Published
2011-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access…
    cvelistv5