CVE-2019-16529 — Checkuser vulnerability

2 documents2 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 60.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mediawiki Checkuser
Timeline
PublishedMar 19
Latest updateMay 24

Description

An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit summaries are still visible in CheckUser results in violation of MediaWiki's permissions model.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

Patches

Patch: phabricator.wikimedia.org ↗Patch: phabricator.wikimedia.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-52q2-xjmg-48v8: An issue was discovered in the CheckUser extension through 1↗2022-05-24
▶