Launchpad.net

CVE 2013-1817

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.

See the CVE page on Mitre.org for more details.