{"containers": {"cna": {"affected": [{"product": "MediaWiki", "vendor": "Wikimedia Foundation", "versions": [{"status": "affected", "version": "before 1.19.10"}, {"status": "affected", "version": "1.2x before 1.21.4"}, {"status": "affected", "version": "1.22.x before 1.22.1"}]}], "datePublic": "2014-01-14T00:00:00", "descriptions": [{"lang": "en", "value": "The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page."}], "problemTypes": [{"descriptions": [{"description": "Path Disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-01-28T14:54:22", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2013-6455", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "MediaWiki", "version": {"version_data": [{"version_value": "before 1.19.10"}, {"version_value": "1.2x before 1.21.4"}, {"version_value": "1.22.x before 1.22.1"}]}}]}, "vendor_name": "Wikimedia Foundation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Path Disclosure"}]}]}, "references": {"reference_data": [{"name": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html", "refsource": "MISC", "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T17:39:01.461Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2013-6455", "datePublished": "2020-01-28T14:54:22", "dateReserved": "2013-11-04T00:00:00", "dateUpdated": "2024-08-06T17:39:01.461Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD89BE0F-27F6-4550-816C-78645DA93431", "versionEndExcluding": "1.19.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "matchCriteriaId": "084F0F91-851A-4EC5-AEEE-15CAB104E58B", "versionEndExcluding": "1.21.4", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "matchCriteriaId": "A18AC051-E349-4B6E-B4E1-7C33AC78115A", "versionEndExcluding": "1.22.1", "versionStartIncluding": "1.22.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page."}, {"lang": "es", "value": "La extensi\u00f3n CentralAuth para MediaWiki versiones anteriores a 1.19.10, versiones 1.2x anteriores a 1.21.4 y versiones 1.22.x anteriores a 1.22.1, permite a atacantes remotos obtener nombres de usuario por medio de vectores relacionados con la escritura de los nombres en el DOM de una p\u00e1gina."}], "id": "CVE-2013-6455", "lastModified": "2024-11-21T01:59:15.970", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "[email protected]", "type": "Primary"}]}, "published": "2020-01-28T15:15:14.703", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "[email protected]", "type": "Primary"}]}

{}