What’s Vulnerable › Vulnerabilities

CVE-2019-19709

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-12-11 · updated 2026-06-17
• Weakness: CWE-601

Description

MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.

Affected products

• Debian Linux: 9.0, 10.0
• Wikimedia Foundation MediaWiki: through 1.33.1

References

• https://gerrit.wikimedia.org/r/q/Ie54f366986056c876eade0fcad6c41f70b8b8de8
• https://phabricator.wikimedia.org/T239466
• https://seclists.org/bugtraq/2019/Dec/48
• https://www.debian.org/security/2019/dsa-4592
• https://gerrit.wikimedia.org/r/q/Ie54f366986056c876eade0fcad6c41f70b8b8de8
• https://phabricator.wikimedia.org/T239466
• https://seclists.org/bugtraq/2019/Dec/48
• https://www.debian.org/security/2019/dsa-4592

Get alerted when CVE-2019-19709 or the next vulnerability affects your stack