CVEvulnerability
CVE-2020-25869
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-09-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-863
Description
An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of actor ID does not necessarily use the correct database or correct wiki.
Affected configurations
• mediawiki mediawiki (< 1.31.10)
• mediawiki mediawiki (>= 1.32.0 < 1.34.4)
• fedoraproject fedora 33
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/ lists.fedoraproject.org
- https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html Mailing List, Vendor Advisory
- https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html Mailing List, Vendor Advisory
- https://phabricator.wikimedia.org/T260485 Permissions Required, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/ lists.fedoraproject.org
- https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html Mailing List, Vendor Advisory
- https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html Mailing List, Vendor Advisory
- https://phabricator.wikimedia.org/T260485 Permissions Required, Vendor Advisory