Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/01/2023 Updated: 08/08/2023

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 0

An issue exists in the CheckUser extension for MediaWiki up to and including 1.39.x. Various components of this extension can expose information on the performer of edits and logged actions. This information should not allow public viewing: it is supposed to be viewable only by users with suppression rights.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mediawiki mediawiki 1.39.0
mediawiki mediawiki 1.39.1

DescriptionThe MITRE CVE dictionary describes this issue as: An issue was discovered in the CheckUser extension for MediaWiki through 139x Various components of this extension can expose information on the performer of edits and logged actions This information should not allow public viewing: it is supposed to be viewable only by users with che ...

CWE-200 https://phabricator.wikimedia.org/T311337 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2022-39193

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-39193

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect