Description
Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Remediation
References
Related Vulnerabilities
WordPress Plugin Evarisk 'ajax.php' SQL Injection (5.1.3.6)
WordPress Plugin Store Locator Plus for WordPress Open Email Relay (4.2.25)
WordPress Plugin Advanced Custom Fields PRO Arbitrary File Upload (5.12.2)
MongoDb CVE-2024-7553 Vulnerability (CVE-2024-7553)
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50096)