CVE-2013-4572

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-Control header to cache session cookies when a user is autocreated, which allows remote attackers to authenticate as the created user.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-384

Affected software

Vendor	Product	Versions
Wikimedia Foundation	MediaWiki	before 1.19.9; 1.20.x before 1.20.8; 1.21.x before 1.21.3

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/122998.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123011.htmlMailing List, Third Party Advisory
http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-November/000135.htmlMailing List, Third Party Advisory
https://bugzilla.wikimedia.org/show_bug.cgi?id=53032Issue Tracking, Patch, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/122998.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123011.htmlMailing List, Third Party Advisory
http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-November/000135.htmlMailing List, Third Party Advisory
https://bugzilla.wikimedia.org/show_bug.cgi?id=53032Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Feb 6, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-45734.3Cross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1.19.x before 1.19.9, 1.20.x before 1.20.8, an CVE-2013-45744.3Cross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x befo CVE-2013-45757.9Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 CVE-2013-45762.1GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allow CVE-2013-45772.1A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as dem CVE-2013-45785.3jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigne CVE-2013-45794.3The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking CVE-2013-45806.8GitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when using a MySQL backend, allows remote attacker CVE-2013-45816.8GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attacke CVE-2013-45826.5The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4 CVE-2013-45838.8The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.CVE-2013-45845.9Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssl_