Description
An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2007-0271 Vulnerability (CVE-2007-0271)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (3.5.2)
WordPress Plugin Custom Post Type UI Cross-Site Scripting (1.0.6)
WordPress Plugin Email Log Information Disclosure (1.9)
Plone CMS Improper Input Validation Vulnerability (CVE-2013-4195)