← Back

CVE-2012-5395

nvd nist
Published: Jun 2, 2014Modified: May 6, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Session fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the centralauth_Session cookie.

Affected (15)

Products: Mediawiki: Mediawiki
1 product
Mediawiki
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 1.20
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Mediawiki
Version 1.19.1
Version 1.19.2
Version 1.19
Version 1.19 beta_1
Version 1.19 beta_2
Configuration C
9 vulnerable
Vulnerable SoftwareAffected Versions
Mediawiki
Up to 1.18.5
Version 1.18.0
Version 1.18.0 rc1
Version 1.18.1
Version 1.18.2
Version 1.18.3
Version 1.18.4
Version 1.18
Version 1.18 beta_1

Timeline

No history available yet.