{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T03:08:24.602","vulnerabilities":[{"cve":{"id":"CVE-2013-6455","sourceIdentifier":"secalert@redhat.com","published":"2020-01-28T15:15:14.703","lastModified":"2026-06-17T00:00:31.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page."},{"lang":"es","value":"La extensión CentralAuth para MediaWiki versiones anteriores a 1.19.10, versiones 1.2x anteriores a 1.21.4 y versiones 1.22.x anteriores a 1.22.1, permite a atacantes remotos obtener nombres de usuario por medio de vectores relacionados con la escritura de los nombres en el DOM de una página."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"Wikimedia Foundation","product":"MediaWiki","versions":[{"version":"before 1.19.10","status":"affected"},{"version":"1.2x before 1.21.4","status":"affected"},{"version":"1.22.x before 1.22.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*","versionEndExcluding":"1.19.10","matchCriteriaId":"CD89BE0F-27F6-4550-816C-78645DA93431"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*","versionStartIncluding":"1.20.0","versionEndExcluding":"1.21.4","matchCriteriaId":"084F0F91-851A-4EC5-AEEE-15CAB104E58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*","versionStartIncluding":"1.22.0","versionEndExcluding":"1.22.1","matchCriteriaId":"A18AC051-E349-4B6E-B4E1-7C33AC78115A"}]}]}],"references":[{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}