Description
In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users.
Remediation
References
Related Vulnerabilities
MySQL CVE-2021-2356 Vulnerability (CVE-2021-2356)
WordPress Plugin Variation Swatches for WooCommerce Cross-Site Scripting (2.1.1)
WordPress Plugin Newsletter-Send awesome emails from WordPress SQL Injection (3.0.8)
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58180)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1509)