Security Advisory

CVE-2013-4572

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-06 14:40:13

Last updated 2024-08-06 16:45:15

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-Control header to cache session cookies when a user is autocreated, which allows remote attackers to authenticate as the created user.

← Browse all CVEs View on cve.org ↗