PT-2010-2866 · Wikimedia Foundation · Mediawiki

Tstarling · Published 2010-04-20 · Updated 2023-02-13 · CVE-2010-1150

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.15.3 MediaWiki version 1.6.x prior to 1.16.0beta2

Description The issue allows remote authenticated users to conduct phishing attacks. This is achieved by arranging for a victim to login to the attacker's account and then execute a crafted user script, related to a "login CSRF" issue. The problem arises from the software not properly handling a correctly authenticated but unintended login attempt.

Recommendations For MediaWiki versions prior to 1.15.3, update to version 1.15.3 or later. For MediaWiki version 1.6.x prior to 1.16.0beta2, update to version 1.16.0beta2 or later.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2010-1150

DSA-2041-1

Affected Products

Mediawiki

References · 16

• 🔥 https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 · Exploit
• http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.3.patch.gz · Patch
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-April/000090.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1150 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2010-1150 · Vendor Advisory
• http://debian.org/security/2010/dsa-2041 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-1150 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-1150 · Vendor Advisory
• http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.0beta2.patch.gz · Patch
• http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_16_0beta2/phase3/RELEASE-NOTES · Note
• http://openwall.com/lists/oss-security/2010/04/07/1 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=580418 · Note
• http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_15_3/phase3/RELEASE-NOTES · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1150 · Note
• http://vupen.com/english/advisories/2010/1055 · Note