In MediaWiki up to and including 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mediawiki mediawiki |
||
fedoraproject fedora 30 |
||
fedoraproject fedora 31 |
||
debian debian linux 9.0 |
||
debian debian linux 10.0 |