CVE-2012-4380
UnknownEPSS 1.65%
Last modified
CVE-2012-4380 is a vulnerability of currently unknown severity. MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors.. EPSS estimates a 1.65% chance of exploitation in the next 30 days.
Description
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mediawiki | Mediawiki | <= 1.18.4 |
| Mediawiki | Mediawiki | 1.19.0 |
| Mediawiki | Mediawiki | 1.19.1 |
References
- http://www.openwall.com/lists/oss-security/2012/08/31/10Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/08/31/6Mailing List, Patch, Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=853440Issue Tracking
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.htmlPatch, Vendor Advisory
- https://phabricator.wikimedia.org/T41824Issue Tracking, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/08/31/10Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/08/31/6Mailing List, Patch, Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=853440Issue Tracking
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.htmlPatch, Vendor Advisory
- https://phabricator.wikimedia.org/T41824Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-4380?
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors.
How severe is CVE-2012-4380?
Severity scoring for CVE-2012-4380 is pending analysis. The EPSS model estimates a 1.65% probability of exploitation in the next 30 days.
How do I fix CVE-2012-4380?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2012-4380?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST