CVE-2010-1189 Information disclosure in n/a
Wiki editors can leak user IP addresses by embedding external images, requiring user interaction to view the page.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2010-1189?
CVE-2010-1189 is a medium-severity vulnerability in Mediawiki Mediawiki, published on 31 Mar 2010. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."
Weakness: CWE-20
Which versions are affected by CVE-2010-1189?
It affects 1 product.
Products include Mediawiki Mediawiki.
How do I fix CVE-2010-1189?
Upgrade to a fixed version.
Is CVE-2010-1189 being exploited?
There is no known exploitation of CVE-2010-1189 in the wild and no public exploit code.
Other vulnerabilities in Mediawiki Mediawiki
Sources
Also known as DEBIAN-CVE-2010-1189, GHSA-cqgp-cp8g-949g.