title: Direct POST to Special:ChangeEmail will bypass reauth check
link: https://phabricator.wikimedia.org/T197279
reference: composer://mediawiki/core
cve: CVE-2019-12468
branches:
1.27.x:
time: 2019-05-30 20:55:13
versions: ['>=1.27.0', '<1.27.6']
1.30.x:
time: 2019-05-30 20:55:57
versions: ['>=1.30.0', '<1.30.2']
1.31.x:
time: 2019-06-06 17:30:41
versions: ['>=1.31.0', '<1.31.2']
1.32.x:
time: 2019-06-06 17:32:56
versions: ['>=1.32.0', '<1.32.2']
|