| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | = 1.18= 1.18.0= 1.18.1= 1.18.2= 1.18.3= 1.18.4= 1.19= 1.19.1= 1.19.2= 1.20≤ 1.18.5 |
Session fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the centralauth_Session cookie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free