CVE-2012-1581

CVE-2012-1581 describes a weakness in MediaWiki versions 1.17.x before 1.17.3 and 1.18.x before 1.18.2, where weak random numbers are used for password reset tokens. This flaw allows remote attackers to more easily change the passwords of arbitrary users. The vulnerability has a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N), indicating it can be exploited over the network with low complexity, requiring no authentication, and primarily impacts integrity by allowing unauthorized password changes. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.