AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-2243

MEDIUM · CVSS 5.8 EPSS 1.55%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-03-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-2243
Severity
MEDIUM
CVSS
5.8
EPSS
1.55%

Original NVD Description

includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timing differences in responses to incorrect token guesses.