CVE-2013-4301

includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a "<" (open angle bracket) character in the lang parameter to w/load.php, which reveals the installation path in an error message.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html
http://osvdb.org/96913
http://seclists.org/oss-sec/2013/q3/553
http://secunia.com/advisories/54715	Vendor Advisory
https://bugzilla.wikimedia.org/show_bug.cgi?id=46332	Exploit Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/86895
https://www.mediawiki.org/wiki/Release_notes/1.19
https://www.mediawiki.org/wiki/Release_notes/1.20
https://www.mediawiki.org/wiki/Release_notes/1.21

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mediawiki:mediawiki:1.19.0:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.19.1:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.19.2:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.19.3:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.19.4:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.19.5:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.19.6:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.19.7:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.20:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.20.1:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.20.2:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.20.3:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.20.4:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.20.5:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.20.6:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.21:::::::*
	cpe:2.3:a:mediawiki:mediawiki:1.21.1:::::::*

History

No history.

Information

Published : 2013-10-27 00:55

Updated : 2024-02-04 18:16

NVD link : CVE-2013-4301

Mitre link : CVE-2013-4301

CVE.ORG link : CVE-2013-4301

JSON object : View

Products Affected

mediawiki

mediawiki

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2013-4301", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-10-27T00:55:03.853", "references": [{"url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html", "source": "secalert@redhat.com"}, {"url": "http://osvdb.org/96913", "source": "secalert@redhat.com"}, {"url": "http://seclists.org/oss-sec/2013/q3/553", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/54715", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.wikimedia.org/show_bug.cgi?id=46332", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86895", "source": "secalert@redhat.com"}, {"url": "https://www.mediawiki.org/wiki/Release_notes/1.19", "source": "secalert@redhat.com"}, {"url": "https://www.mediawiki.org/wiki/Release_notes/1.20", "source": "secalert@redhat.com"}, {"url": "https://www.mediawiki.org/wiki/Release_notes/1.21", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a \"<\" (open angle bracket) character in the lang parameter to w/load.php, which reveals the installation path in an error message."}, {"lang": "es", "value": "includes/resourceloader/ResourceLoaderContext.php en MediaWiki 1.19.x anterior a la versi\u00f3n 1.19.8, 1.20.x anterior a 1.20.7, y 1.21.x anterior a la versi\u00f3n 1.21.2 permite a atacantes remotos obtener informaci\u00f3n sensible a trav\u00e9s de \"<\" (bracket de \u00e1ngulo abierto) car\u00e1cter en el par\u00e1metro de lenguaje a w/load.php, lo que revela el directorio de instalaci\u00f3n en un mensaje de error."}], "lastModified": "2017-08-29T01:33:36.823", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.19.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7C29D44-2964-483F-B672-27B5CE471DA6"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.19.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "172FEFE5-9900-49D0-9E14-2FA4A7912D23"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.19.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA3205F5-3A29-4D45-AC95-83174F8969BB"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.19.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5547DA02-3BEC-4278-A714-25CCB820AA79"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.19.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3E5609D-EC04-4088-9B61-ABDD256200F7"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.19.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B23B09BB-8F43-4D60-A37F-D8685584AF4B"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.19.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A8A3F38-9A86-4346-9337-5C2A1DED37C0"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.19.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49CCC3B5-9BD4-40B4-AF1A-DF4B2A6DC12D"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FA45494-185A-4ED1-8818-D9F14EB9B59B"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59319309-D926-4353-8E0C-1FE0CB97E4D5"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA15B197-EC42-49F0-8764-E315CDA7EA03"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECD4CD3D-6022-4F75-A524-5A5247EF23AD"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75B95AE3-6FA0-44BD-A78A-F059613B57EC"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94646567-FF30-4FBA-96C5-914EB3C85D7F"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF088531-6875-49A2-B220-D7EC38ECC50F"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "383CE1D8-7A58-4C24-8898-8C592F98EFCC"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DA12531-818E-4AD7-A3E7-467604775416"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}