Lucene search
PRIOn knowledge basePRION:CVE-2023-45364HistoryOct 09, 2023 - 5:15 a.m.
Information disclosure
2023-10-0905:15:00
PRIOn knowledge base
www.prio-n.com
7
information disclosure
deleted revision
incorrect permissions
mediawiki
nvd
An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked. This reveals that a given revision ID belonged to the given page title, and its timestamp, both of which are not supposed to be public information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 11.0 | |
| debian_linux | eq | 12.0 | |
| mediawiki | eq | 1.40.0 | |
| mediawiki | ge | 1.36.0 | |
| mediawiki | lt | 1.39.5 |
Related
osv
osv
CVE-2023-45364
2023-10-09 05:15:09
BIT-mediawiki-2023-45364
2024-03-06 10:58:40
openvas
openvas
MediaWiki 1.36.x < 1.39.5, 1.40.x < 1.40.1 Incorrect Permissions Vulnerability - Windows
2023-10-18 00:00:00
MediaWiki 1.36.x < 1.39.5, 1.40.x < 1.40.1 Incorrect Permissions Vulnerability - Linux
2023-10-18 00:00:00
Mageia: Security Advisory (MGASA-2024-0155)
2024-05-01 00:00:00
veracode
veracode
Information Disclosure
2023-10-10 01:55:31
cvelist
cvelist
CVE-2023-45364
2023-10-09 00:00:00
cve
cve
CVE-2023-45364
2023-10-09 05:15:09
nvd
nvd
CVE-2023-45364
2023-10-09 05:15:09
debiancve
debiancve
CVE-2023-45364
2023-10-09 05:15:09
ubuntucve
ubuntucve
CVE-2023-45364
2023-10-09 00:00:00
debian
debian
[SECURITY] [DSA 5520-1] mediawiki security update
2023-10-10 19:25:45
nessus
nessus
Debian DSA-5520-1 : mediawiki - security update
2023-10-10 00:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2024-05-01 01:25:14
redos
redos
ROS-20240505-13
2024-04-05 00:00:00