Security Advisory
CVE-2014-9481
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML.