Description (CNA)
The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Wikimedia Foundation / MediaWiki | affected before 1.19.10; affected 1.2x before 1.21.4; affected 1.22.x before 1.22.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.