Unrated

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely u...

CVE-2023-22912 First seen on SecPulse Jan 20, 2023

Original description The description as published by the source.

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely uses AES-CTR encryption with a repeated (aka re-used) nonce, allowing an adversary to decrypt.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web phabricator.wikimedia.org

Key facts

Severity: Unrated
Published: Jan 20, 2023
First seen on SecPulse: Jan 20, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:57