CVE-2016-6332

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-6332

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6332.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-6332

Downstream

Published

2017-04-20T17:59:00Z

Modified

2026-10-20T10:47:55Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive information by leveraging failure to terminate sessions when a user account is blocked.

References

Affected packages

Git / github.com/wikimedia/mediawiki

Affected ranges

Type

GIT

Repo

https://github.com/wikimedia/mediawiki

Events

Introduced

Last Affected

1b1588f892b81983d5cd93bea6f5b5d652b2cdf5

Introduced

365e22ee61035f953b47387af92ef832f09d5982

Last Affected

758cd9d2371d529450448cdf7eb2f1f6e099cfee

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "1.23.14"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.26.0"
                },
                {
                    "last_affected":  "1.26.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.26.1"
                },
                {
                    "last_affected":  "1.26.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.26.2"
                },
                {
                    "last_affected":  "1.26.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.26.3"
                },
                {
                    "last_affected":  "1.26.3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.26.4"
                },
                {
                    "last_affected":  "1.26.4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.27.0"
                },
                {
                    "last_affected":  "1.27.0"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

1.*

1.1.0

1.23.0

1.23.0-rc.1

1.23.0-rc.2

1.23.0-rc.3

1.23.0rc0

1.23.1

1.23.10

1.23.11

1.23.12

1.23.13

1.23.14

1.23.2

1.23.3

1.23.4

1.23.5

1.23.6

1.23.7

1.23.8

1.23.9

1.26.0

1.26.1

1.26.2

1.26.3

1.26.4

1.27.0

1.27.0-rc.0

1.27.0-rc.1

1.3.0beta1

1.5.0alpha1

1.5.0alpha2

1.5.0beta1

1.5.0beta2

1.5.0beta3

1.5.0beta4

1.6.0

Other

test-hashar-for-ci

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6332.json"