Description

An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Usernames of hidden users are exposed.

Remediation

References

CVE-2023-45369

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-1999-0738)

MySQL CVE-2013-3807 Vulnerability (CVE-2013-3807)

WordPress Plugin Permalink Manager Lite Cross-Site Scripting (2.2.14)

WordPress Plugin wp-FileManager Arbitrary File Disclosure (1.3.0)

Joomla! Core Security Bypass (2.5.0 - 3.8.7)

Severity

Medium

Classification

CVE-2023-45369 CWE-732 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities