VDB
CVE-2010-2787
CVE-2010-2787
PUBLISHED
CVSS 4.300000190734863 MEDIUM
api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.
EPSS 1.65% · 76.4th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
1.65%
76.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| mediawiki | mediawiki | 0, 1.2.0, 1.2.1 |
Timeline
- Apr 27, 2011 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
References
- FEDORA-2011-5495 vendor-advisory
- http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69776 url
- [mediawiki-announce] 20100728 MediaWiki security release: 1.16.0 and 1.15.5 mailing-list
- FEDORA-2011-5812 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2010-2787 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=620226 url
- https://bugzilla.wikimedia.org/show_bug.cgi?id=24565 technical
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html technical
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html technical
- http://openwall.com/lists/oss-security/2010/07/29/4 patch
- http://www.securityfocus.com/bid/42019 patch
- https://bugzilla.redhat.com/show_bug.cgi?id=620224 patch