Description
api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mediawiki | 1:1.15.5-1 | — |
| Debian 13 | mediawiki | 1:1.15.5-1 | — |
| Debian 12 | mediawiki | 1:1.15.5-1 | — |
References
- FEDORA-2011-5495 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=620226
- FEDORA-2011-5807 vendor-advisory
- [oss-security] 20100729 Re: CVE request: mediawiki mailing-list
- http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69776
- https://bugzilla.wikimedia.org/show_bug.cgi?id=24565
- FEDORA-2011-5848 vendor-advisory
- [mediawiki-announce] 20100728 MediaWiki security release: 1.16.0 and 1.15.5 mailing-list
- 42019 vdb-entry
- FEDORA-2011-5812 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=620224