CVE-2013-2032

MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and…

published November 15, 2013

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attackers to bypass the intended restrictions of an extension that only implements one of these blocks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02510 · 84.6th percentile
Published
2013-11-15T18:16Z
EPSS history
Timeline
  • 15 NOV 18:16Z
    MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and…
    cvelistv5