Description
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Some unprivileged users can view confidential information (e.g., IP addresses and User-Agent headers for election traffic) on a testwiki SecurePoll instance.
Remediation
References
Related Vulnerabilities
WordPress Plugin Subscriptions & Memberships for PayPal Unspecified Vulnerability (1.1.5)
Drupal Core 8.0.x Multiple Vulnerabilities (8.0.0 - 8.0.3)
WordPress Plugin Ultimate Tag Cloud Widget Unspecified Vulnerability (2.3)
WordPress Plugin NextGEN Gallery-WordPress Gallery Privilege Escalation (3.2.2)