CVE-2011-4361

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by (1) leveraging the SpecialUpload::ajaxGetExistsWarning function, or by (2) leveraging an extension, as demonstrated by the CategoryTree, ExtTab, and InlineEditor extensions.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-276

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.htmlPatch, Vendor Advisory
http://openwall.com/lists/oss-security/2011/11/29/12Mailing List, Third Party Advisory
http://openwall.com/lists/oss-security/2011/11/29/6Mailing List, Third Party Advisory
http://www.debian.org/security/2011/dsa-2366Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=758171Issue Tracking, Third Party Advisory
https://bugzilla.wikimedia.org/show_bug.cgi?id=32616Issue Tracking, Patch, Vendor Advisory
http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.htmlPatch, Vendor Advisory
http://openwall.com/lists/oss-security/2011/11/29/12Mailing List, Third Party Advisory
http://openwall.com/lists/oss-security/2011/11/29/6Mailing List, Third Party Advisory
http://www.debian.org/security/2011/dsa-2366Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=758171Issue Tracking, Third Party Advisory
https://bugzilla.wikimedia.org/show_bug.cgi?id=32616Issue Tracking, Patch, Vendor Advisory

Timeline

Published: Jan 8, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-43625.0Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 CVE-2011-43632.6ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is enabled, allows local users to overwrite arb CVE-2011-43646.8Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x befor CVE-2011-43675.0Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2 CVE-2011-43684.3Cross-site scripting (XSS) vulnerability in Remote Development Services (RDS) in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers CVE-2011-436910.0Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through CVE-2011-43707.5Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de CVE-2011-43717.5Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de CVE-2011-43729.8Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de CVE-2011-43739.8Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de CVE-2011-43749.3Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.CVE-2011-44035.8Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of adminis