Description
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt.
Remediation
References
Related Vulnerabilities
WordPress Plugin Redirection PHP Object Injection (2.7.3)
Jenkins Resource Management Errors Vulnerability (CVE-2014-3661)
Drupal Core Security Bypass (8.0.0 - 9.1.15)
PHP-Fusion URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-23182)
WordPress Plugin bbPress Members Only Cross-Site Request Forgery (1.2.1)