Description

An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Usernames of hidden users are exposed.

Remediation

References

CVE-2023-45369

Related Vulnerabilities

WordPress Plugin EWWW Image Optimizer Remote Code Execution (2.8.3)

phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-13376)

WordPress Plugin Simple Share Buttons Adder Multiple Vulnerabilities (4.4)

SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1860)

phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9863)

Severity

Medium

Classification

CVE-2023-45369 CWE-732 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities