Description

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. (The log_deleted attribute is not respected.)

Remediation

References

CVE-2024-40597

Related Vulnerabilities

WordPress Plugin The Plus Addons for Elementor Open Redirect (4.1.9)

Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1915)

PHP NULL Pointer Dereference Vulnerability (CVE-2026-7259)

TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5745)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2024-40597