Unscored CVE-2021-31547 EUVD-2021-18444GHSA-x7v9-mpxr-pg87

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its AbuseFilterCheckMatch API reveals suppressed edits a…

Published Apr 22, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its AbuseFilterCheckMatch API reveals suppressed edits and usernames to unprivileged users through the iteration of crafted AbuseFilter rules.

References

https://phabricator.wikimedia.org/T223654
https://gerrit.wikimedia.org/r/q/I3f7dbd8b873d411e37c8c3aac2339bf5ec36907d
https://gerrit.wikimedia.org/r/q/I4900b1be73323599d74e3164447f81eded094d75