Description
The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
References (6)
Core 6
Core References
Issue Tracking x_refsource_confirm
https://phabricator.wikimedia.org/T48457
Vendor Advisory mailing-list
x_refsource_mlist
https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/08/27/6
Patch x_refsource_confirm
https://github.com/wikimedia/mediawiki/commit/dc2966bd05b69321300c63fd0bd78e7c78ecea6e
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/08/12/6
Scores
EPSS
0.0045
EPSS Percentile
63.9%
Details
CWE
CWE-200
Status
published
Products (1)
mediawiki/mediawiki
< 1.22.0
Published
Sep 01, 2015
Tracked Since
Feb 18, 2026