Wikimedia · Mediawiki · CVE-2012-1581
**Name of the Vulnerable Software and Affected Versions**
MediaWiki versions 1.17.x through 1.17.2
MediaWiki versions 1.18.x through 1.18.1
**Description**
The issue allows remote attackers to change the passwords of arbitrary users due to the use of weak random numbers for password reset tokens.
**Recommendations**
For MediaWiki versions 1.17.x through 1.17.2, update to version 1.17.3 or later.
For MediaWiki versions 1.18.x through 1.18.1, update to version 1.18.2 or later.