CVE-2013-4304

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-01-26 · updated 2026-06-16
Weakness: CWE-287

Description

The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a valid CentralAuthUser object in the centralauth_User cookie even when a user has not successfully logged in, which allows remote attackers to bypass authentication without a password.

Affected products

Brion Vibber Centralauth Extension: all versions
Wikimedia Foundation MediaWiki: 1.19, 1.19-beta_1, 1.19-beta_2, 1.19.0, 1.19.1, 1.19.2 (+14)

References

http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html
http://osvdb.org/96910
http://seclists.org/oss-sec/2013/q3/553
http://secunia.com/advisories/54723
https://bugzilla.wikimedia.org/show_bug.cgi?id=52338
https://exchange.xforce.ibmcloud.com/vulnerabilities/86894
http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html
http://osvdb.org/96910
http://seclists.org/oss-sec/2013/q3/553
http://secunia.com/advisories/54723
https://bugzilla.wikimedia.org/show_bug.cgi?id=52338
https://exchange.xforce.ibmcloud.com/vulnerabilities/86894

Get alerted when CVE-2013-4304 or the next vulnerability affects your stack