Skip to content
OpenAdvisories

Product · Wikimedia Foundation

AbuseFilter

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-34086

    AbuseFilter misuses ::userCanBitfield, exposing access-controlled information

    Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2.

    Wikimedia Foundation AbuseFilter mediawiki mediawiki Debian Ubuntu
  • Low 2.1
    CVE-2025-6592

    Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

    Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0.

    Wikimedia Foundation AbuseFilter mediawiki mediawiki Debian Ubuntu