Description

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension can expose information on the performer of edits and logged actions. This information should not allow public viewing: it is supposed to be viewable only by users with checkuser access.

Remediation

References

CVE-2022-39193

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-1999-0738)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.4)

Roundcube Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-44026)

WordPress Plugin BuddyPress Multiple Vulnerabilities (9.0.0)

PHP Other Vulnerability (CVE-2015-8866)

Severity

Medium

Classification

CVE-2022-39193 CWE-668 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities