CVE-2015-8628

The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12…

published March 23, 2017

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01409 · 72.4th percentile
Published
2017-03-23T20:00Z
EPSS history
Timeline
  • 23 MAR 20:00Z
    The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12…
    cvelistv5