An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The page_recent_contributors leaked the existence of certain deleted MediaWiki usernames, related to rev_deleted.
References
Link | Resource |
---|---|
https://phabricator.wikimedia.org/T71367 | Third Party Advisory |
https://gerrit.wikimedia.org/r/q/I8d5ed9ca84282ee50832035af86123633fc88293 | Issue Tracking Vendor Advisory |
Configurations
Information
Published : 2021-04-21 20:15
Updated : 2021-04-22 12:51
NVD link : CVE-2021-31545
Mitre link : CVE-2021-31545
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
mediawiki
- mediawiki