Description
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name (when the user has been revision deleted/suppressed).
Remediation
References
Related Vulnerabilities
Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-38002)
WordPress Plugin Easy Forms for MailChimp Unspecified Vulnerability (6.3.2)
WordPress 3.8.3 Multiple Vulnerabilities (3.8 - 3.8.3)
WordPress Plugin PHP Everywhere Multiple Remote Code Execution Vulnerabilities (2.0.3)
Atlassian Jira CVE-2019-20402 Vulnerability (CVE-2019-20402)