Security Advisory

CVE-2019-12468

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-07-10 14:58:15
Last updated 2024-08-04 23:24:37
Assigner mitre
State PUBLISHED

Description

An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.