CVE-2011-4360

N/A Unknown

Published: January 08, 2012 Modified: April 29, 2026

Description

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html

Source: secalert@redhat.com

Patch Vendor Advisory

http://openwall.com/lists/oss-security/2011/11/29/12

Source: secalert@redhat.com

Mailing List Third Party Advisory

http://openwall.com/lists/oss-security/2011/11/29/6

Source: secalert@redhat.com

Mailing List Third Party Advisory

http://www.debian.org/security/2011/dsa-2366

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=758171

Source: secalert@redhat.com

Issue Tracking Third Party Advisory

https://bugzilla.wikimedia.org/show_bug.cgi?id=32276

Source: secalert@redhat.com

Issue Tracking Patch Vendor Advisory

http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html