Description
In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users.
Remediation
References
Related Vulnerabilities
WordPress Plugin Seatgeek Affiliate Tickets Cross-Site Scripting (1.0.2)
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28566)
WordPress Plugin Contact Form Unspecified Vulnerability (1.2)
WordPress Plugin Filedownload Multiple Vulnerabilities (1.4)
Roundcube Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4077)