Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Mediawiki Subscribe
Filtered by product Abusefilter
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-16528 1 Mediawiki 1 Abusefilter 2021-07-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL1_32 and REL1_33.
CVE-2019-18987 1 Mediawiki 1 Abusefilter 2019-11-22 5.0 MEDIUM 5.3 MEDIUM
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public, its previous versions can be exposed, thus potentially disclosing private or sensitive information within the filter's definition.
CVE-2019-18612 1 Mediawiki 1 Abusefilter 2019-10-31 5.0 MEDIUM 5.3 MEDIUM
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Previously hidden (restricted) AbuseFilter filters were viewable (or their differences were viewable) to unprivileged users, thus disclosing potentially sensitive information.