CVE-2011-4360

Description

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.

How to fix CVE-2011-4360

To remediate CVE-2011-4360, upgrade the affected package to a fixed version below.

• Debian/mediawiki—upgrade to 1:1.15.5-4 or later

Is CVE-2011-4360 being exploited?

Low — EPSS is 0.6%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1:1.15.5-4

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2011-4360