Description
The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Scribunto | Scribunto | — | — |