CVE-2011-1580
N/A
Published: April 27, 2011 at 12:00 AM UTC
Updated: June 16, 2026 at 11:29 PM UTC
1 product affected across 1 vendorMediaWiki
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.16.21.1.01.10.01.10.0 rc11.10.0 rc21.10.11.10.21.10.31.10.41.111.11.01.11.0 rc11.11.11.11.21.12.01.12.0 rc11.12.11.12.21.12.31.12.41.13.01.13.0 rc11.13.0 rc21.13.11.13.21.13.31.13.41.14.01.14.0 rc11.14.11.15.01.15.0 rc11.15.11.15.21.15.31.15.41.15.51.16.01.16.0 beta11.16.0 beta21.16.11.2.01.2.11.2.21.2.31.2.41.2.51.2.61.31.3.01.3.11.3.101.3.111.3.121.3.131.3.141.3.151.3.21.3.31.3.41.3.51.3.61.3.71.3.81.3.91.4 beta11.4 beta21.4 beta31.4 beta41.4 beta51.4 beta61.4.01.4.11.4.101.4.111.4.121.4.131.4.141.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.91.5 alpha11.5 alpha21.5 beta11.5 beta21.5 beta31.5 beta41.5 rc21.5 rc31.5 rc41.5.01.5.11.5.21.5.31.5.41.5.51.5.61.5.71.5.81.6.01.6.11.6.101.6.111.6.121.6.21.6.31.6.41.6.51.6.61.6.71.6.81.6.91.7.01.7.11.7.21.7.31.8.01.8.11.8.21.8.31.8.41.8.51.9.01.9.0 rc21.9.11.9.21.9.31.9.41.9.51.9.6
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html
References (16)
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.htmlMailing Listx_refsource_MLISTPatchVendor Advisory
Source: [email protected]
http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.htmlMailing Listx_refsource_MLISTPatch
Source: [email protected]
http://openwall.com/lists/oss-security/2011/04/13/15Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/44142Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2011/dsa-2366Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card