Description
An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. (The log_deleted attribute is not respected.)
Remediation
References
Related Vulnerabilities
Joomla Improper Input Validation Vulnerability (CVE-2015-8564)
MongoDb Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-13066)
WordPress Plugin Front-end Editor 'upload.php' Arbitrary File Upload (2.2.1)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7859)
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0155)