CVE-2012-0046

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

mediawiki allows deleted text to be exposed

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
mediawiki	mediawiki	1.16

References

https://access.redhat.com/security/cve/cve-2012-0046Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0046Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-0046Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-0046Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0046Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-0046Third Party Advisory

Timeline

Published: Oct 29, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-00474.3Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote attackers to inject arbitrary web script or HTML CVE-2012-00484.3OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing CVE-2012-00494.3OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.CVE-2012-00505.0OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) vi CVE-2012-00517.4Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.CVE-2012-00525.8Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers t CVE-2012-00534.3protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (CVE-2012-00543.3libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, a CVE-2012-00557.8OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow CVE-2012-00566.9The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<p CVE-2012-00576.4PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT styleshe CVE-2012-00585.5The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vector