Security Advisory

CVE-2023-22912

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-01-20 00:00:00

Last updated 2025-04-03 15:13:11

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely uses AES-CTR encryption with a repeated (aka re-used) nonce, allowing an adversary to decrypt.

← Browse all CVEs View on cve.org ↗