Unscored severity · published Sep 1, 2015
CVE-2015-6727
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Mediawiki · Mediawiki
through 1.23.9; 1.24.0; 1.24.1; 1.24.2; 1.25.0; 1.25.1 · source: NVD
UL
Ubuntu Linux · Canonical
15.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6727
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6727
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/08/12/6
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/08/27/6
github.com
https://github.com/wikimedia/mediawiki/commit/5faabfa1bbf65536ea36108887040198afcb3c82
Vendor Advisory
https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html
phabricator.wikimedia.org
https://phabricator.wikimedia.org/T106893
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation