MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attackers to bypass the intended restrictions of an extension that only implements one of these blocks.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mediawiki | Mediawiki | * | 1.19.5 (including) |
| Mediawiki | Mediawiki | 1.1.0 (including) | 1.1.0 (including) |
| Mediawiki | Mediawiki | 1.10.0 (including) | 1.10.0 (including) |
| Mediawiki | Mediawiki | 1.10.0-rc1 (including) | 1.10.0-rc1 (including) |
| Mediawiki | Mediawiki | 1.10.0-rc2 (including) | 1.10.0-rc2 (including) |
| Mediawiki | Mediawiki | 1.10.1 (including) | 1.10.1 (including) |
| Mediawiki | Mediawiki | 1.10.2 (including) | 1.10.2 (including) |
| Mediawiki | Mediawiki | 1.10.3 (including) | 1.10.3 (including) |
| Mediawiki | Mediawiki | 1.10.4 (including) | 1.10.4 (including) |
| Mediawiki | Mediawiki | 1.11 (including) | 1.11 (including) |
| Mediawiki | Mediawiki | 1.11.0 (including) | 1.11.0 (including) |
| Mediawiki | Mediawiki | 1.11.0-rc1 (including) | 1.11.0-rc1 (including) |
| Mediawiki | Mediawiki | 1.11.1 (including) | 1.11.1 (including) |
| Mediawiki | Mediawiki | 1.11.2 (including) | 1.11.2 (including) |
| Mediawiki | Mediawiki | 1.12.0 (including) | 1.12.0 (including) |
| Mediawiki | Mediawiki | 1.12.0-rc1 (including) | 1.12.0-rc1 (including) |
| Mediawiki | Mediawiki | 1.12.1 (including) | 1.12.1 (including) |
| Mediawiki | Mediawiki | 1.12.2 (including) | 1.12.2 (including) |
| Mediawiki | Mediawiki | 1.12.3 (including) | 1.12.3 (including) |
| Mediawiki | Mediawiki | 1.12.4 (including) | 1.12.4 (including) |
| Mediawiki | Mediawiki | 1.13.0 (including) | 1.13.0 (including) |
| Mediawiki | Mediawiki | 1.13.0-rc1 (including) | 1.13.0-rc1 (including) |
| Mediawiki | Mediawiki | 1.13.0-rc2 (including) | 1.13.0-rc2 (including) |
| Mediawiki | Mediawiki | 1.13.1 (including) | 1.13.1 (including) |
| Mediawiki | Mediawiki | 1.13.2 (including) | 1.13.2 (including) |
| Mediawiki | Mediawiki | 1.13.3 (including) | 1.13.3 (including) |
| Mediawiki | Mediawiki | 1.13.4 (including) | 1.13.4 (including) |
| Mediawiki | Mediawiki | 1.14.0 (including) | 1.14.0 (including) |
| Mediawiki | Mediawiki | 1.14.0-rc1 (including) | 1.14.0-rc1 (including) |
| Mediawiki | Mediawiki | 1.14.1 (including) | 1.14.1 (including) |
| Mediawiki | Mediawiki | 1.15.0 (including) | 1.15.0 (including) |
| Mediawiki | Mediawiki | 1.15.0-rc1 (including) | 1.15.0-rc1 (including) |
| Mediawiki | Mediawiki | 1.15.1 (including) | 1.15.1 (including) |
| Mediawiki | Mediawiki | 1.15.2 (including) | 1.15.2 (including) |
| Mediawiki | Mediawiki | 1.15.3 (including) | 1.15.3 (including) |
| Mediawiki | Mediawiki | 1.15.4 (including) | 1.15.4 (including) |
| Mediawiki | Mediawiki | 1.15.5 (including) | 1.15.5 (including) |
| Mediawiki | Mediawiki | 1.16.0 (including) | 1.16.0 (including) |
| Mediawiki | Mediawiki | 1.16.0-beta1 (including) | 1.16.0-beta1 (including) |
| Mediawiki | Mediawiki | 1.16.0-beta2 (including) | 1.16.0-beta2 (including) |
| Mediawiki | Mediawiki | 1.16.0-beta3 (including) | 1.16.0-beta3 (including) |
| Mediawiki | Mediawiki | 1.16.1 (including) | 1.16.1 (including) |
| Mediawiki | Mediawiki | 1.16.2 (including) | 1.16.2 (including) |
| Mediawiki | Mediawiki | 1.17 (including) | 1.17 (including) |
| Mediawiki | Mediawiki | 1.17-beta_1 (including) | 1.17-beta_1 (including) |
| Mediawiki | Mediawiki | 1.17.0 (including) | 1.17.0 (including) |
| Mediawiki | Mediawiki | 1.17.0-rc1 (including) | 1.17.0-rc1 (including) |
| Mediawiki | Mediawiki | 1.17.1 (including) | 1.17.1 (including) |
| Mediawiki | Mediawiki | 1.17.2 (including) | 1.17.2 (including) |
| Mediawiki | Mediawiki | 1.17.3 (including) | 1.17.3 (including) |
| Mediawiki | Mediawiki | 1.17.4 (including) | 1.17.4 (including) |
| Mediawiki | Mediawiki | 1.18 (including) | 1.18 (including) |
| Mediawiki | Mediawiki | 1.18-beta_1 (including) | 1.18-beta_1 (including) |
| Mediawiki | Mediawiki | 1.18.0 (including) | 1.18.0 (including) |
| Mediawiki | Mediawiki | 1.18.0-rc1 (including) | 1.18.0-rc1 (including) |
| Mediawiki | Mediawiki | 1.18.1 (including) | 1.18.1 (including) |
| Mediawiki | Mediawiki | 1.18.2 (including) | 1.18.2 (including) |
| Mediawiki | Mediawiki | 1.18.3 (including) | 1.18.3 (including) |
| Mediawiki | Mediawiki | 1.19 (including) | 1.19 (including) |
| Mediawiki | Mediawiki | 1.19-beta_1 (including) | 1.19-beta_1 (including) |
| Mediawiki | Mediawiki | 1.19-beta_2 (including) | 1.19-beta_2 (including) |
| Mediawiki | Mediawiki | 1.19.0 (including) | 1.19.0 (including) |
| Mediawiki | Mediawiki | 1.19.1 (including) | 1.19.1 (including) |
| Mediawiki | Mediawiki | 1.19.2 (including) | 1.19.2 (including) |
| Mediawiki | Mediawiki | 1.19.3 (including) | 1.19.3 (including) |
| Mediawiki | Mediawiki | 1.19.4 (including) | 1.19.4 (including) |
| Mediawiki | Mediawiki | 1.20.1 (including) | 1.20.1 (including) |
| Mediawiki | Mediawiki | 1.20.2 (including) | 1.20.2 (including) |
| Mediawiki | Mediawiki | 1.20.3 (including) | 1.20.3 (including) |
| Mediawiki | Mediawiki | 1.20.4 (including) | 1.20.4 (including) |
| Mediawiki | Ubuntu | artful | * |
| Mediawiki | Ubuntu | hardy | * |
| Mediawiki | Ubuntu | lucid | * |
| Mediawiki | Ubuntu | oneiric | * |
| Mediawiki | Ubuntu | precise | * |
| Mediawiki | Ubuntu | quantal | * |
| Mediawiki | Ubuntu | raring | * |
| Mediawiki | Ubuntu | saucy | * |
| Mediawiki | Ubuntu | upstream | * |
| Mediawiki | Ubuntu | utopic | * |
| Mediawiki | Ubuntu | vivid | * |
| Mediawiki | Ubuntu | wily | * |
| Mediawiki | Ubuntu | yakkety | * |
| Mediawiki | Ubuntu | zesty | * |