CVEvulnerability
CVE-2023-45369
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-732
Description
An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Usernames of hidden users are exposed.
Affected configurations
• mediawiki mediawiki (< 1.35.12)
• mediawiki mediawiki (>= 1.36.0 < 1.39.5)
• mediawiki mediawiki 1.40.0
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/960676 Issue Tracking, Vendor Advisory
- https://phabricator.wikimedia.org/T344359 Issue Tracking, Vendor Advisory
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/960676 Issue Tracking, Vendor Advisory
- https://phabricator.wikimedia.org/T344359 Issue Tracking, Vendor Advisory