Unscored CVE-2023-45369 EUVD-2023-49661GHSA-9p32-m2gh-22gj

An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.…

Published Oct 9, 2023 · Updated Sep 19, 2024 · Assigned by mitre

Description

An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Usernames of hidden users are exposed.

Advisories 1

WID-SEC-2023-2594 MediaWiki: Mehre Schwachstellen BSI CERT-Bund (WID) · Nov 28, 2023

References

https://phabricator.wikimedia.org/T344359
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/960676