Description
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its AbuseFilterCheckMatch API reveals suppressed edits and usernames to unprivileged users through the iteration of crafted AbuseFilter rules.
Remediation
References
Related Vulnerabilities
WordPress Plugin TeraWallet-For WooCommerce Insecure Direct Object Reference (1.4.3)
WordPress Plugin Site Kit by Google Security Bypass (1.7.1)
XOOPS Other Vulnerability (CVE-2005-2112)
WordPress 7PK - Security Features Vulnerability (CVE-2014-9039)
WordPress Plugin Active Directory Integration/LDAP Integration Unspecified Vulnerability (3.6.95)