MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.
| Software | From | Fixed in |
|---|---|---|
| mediawiki / mediawiki | - | 1.19.4 |
| mediawiki / mediawiki | 1.20.0 | 1.20.3 |
| debian / debian_linux | 9.0 | 9.0.x |
| debian / debian_linux | 10.0 | 10.0.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |
| fedoraproject / fedora | 18 | 18.x |