CVE-2011-1580
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges,...
CVE-2011-1580 is a low vulnerability (CVSS 3.5) in Mediawiki, published April 27, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.01%, the 81st percentile. Fixed in mediawiki 1:1.15.5-5.
- Severity
- 3.5 LowCVSS 2.0, NVD
- Exploit chance
- 2.01%EPSS, 81st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:1.15.5-5mediawiki +4 more
Description
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mediawikiDebian:12 | before 1:1.15.5-5 | 1:1.15.5-5 |
mediawikiDebian:13 | before 1:1.15.5-5 | 1:1.15.5-5 |
mediawikiDebian:14 | before 1:1.15.5-5 | 1:1.15.5-5 |
mediawikiDebian:6.0 From an advisory covering 6 CVEs | before 1:1.15.5-2squeeze2, plus listed versions 1:1.15.5-21:1.15.5-2squeeze1 | 1:1.15.5-2squeeze2 |
mediawikiDebian:5.0 From an advisory covering 6 CVEs | before 1:1.12.0-2lenny9, plus listed versions 1:1.12.0-2lenny21:1.12.0-2lenny31:1.12.0-2lenny3~bpo40+11:1.12.0-2lenny41:1.12.0-2lenny51:1.12.0-2lenny61:1.12.0-2lenny71:1.12.0-2lenny8 | 1:1.12.0-2lenny9 |
What each source reports
NVD Score used
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
- Record
CVE-2011-1580- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
- Record
CVE-2011-1580- Updated
- 2026-11-02
EUVDEUVD-2011-1581No score
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
- Record
EUVD-2011-1581- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5f9r-6cq4-fph8No score
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges,...
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
- Record
GHSA-5f9r-6cq4-fph8- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
- Record
CVE-2011-1580- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1580No score
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
- Record
DEBIAN-CVE-2011-1580- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html
vupen.com/english/advisories/2011/0978
securityfocus.com/bid/47354
secunia.com/advisories/44142
Show 13 moreShow less
debian.org/security/2011/dsa-2366
bugzilla.redhat.com/show_bug.cgi?id=696360
lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html
exchange.xforce.ibmcloud.com/vulnerabilities/66739
bugzilla.wikimedia.org/show_bug.cgi?id=28449
openwall.com/lists/oss-security/2011/04/13/15
nvd.nist.gov/vuln/detail/CVE-2011-1580
github.com/advisories/GHSA-5f9r-6cq4-fph8
security-tracker.debian.org/tracker/CVE-2011-1580