Fluid Attacks Database

Description

Mediawiki information disclosure vulnerability Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
packagist	mediawiki/core	>=1.27.0 <1.27.5 \|\| >=1.29.0 <1.29.3 \|\| >=1.30.0 <1.30.1 \|\| >=1.31.0 <1.31.1	1.27.5, 1.29.3, 1.30.1, 1.31.1
debian 14	mediawiki	>=0 <1:1.31.1-1	1:1.31.1-1
debian 13	mediawiki	>=0 <1:1.31.1-1	1:1.31.1-1
debian 12	mediawiki	>=0 <1:1.31.1-1	1:1.31.1-1
debian 11	mediawiki	>=0 <1:1.31.1-1	1:1.31.1-1

Aliases

1. CVE-2018-05042. NVD-2018-05043. OSV-2018-05044. OSV-DEBIAN-2018-05045. GCVE-2018-05046. access.redhat.com7. access.redhat.com8. SECURITY-TRACKER-CVE-2018-0504

References

1. https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0504.yaml2. https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html3. https://phabricator.wikimedia.org/T1876384. https://www.debian.org/security/2018/dsa-43015. http://www.securitytracker.com/id/1041695