GitHub Advisoryadvisory · Packagist

GHSA-c4rj-wrmq-52rj MediaWiki Special:UserRights exposes the existence of hidden users

MEDIUM Published 2022-05-24 Modified 2024-05-17 Official page ↗
Aliases
CVE-2020-25813
Ecosystem
Packagist
Packages
mediawiki/core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Reviewed
2024-05-17

Affected packages

• Packagist mediawiki/core: >= 1.31.0, < 1.31.9 → fixed in 1.31.9 • Packagist mediawiki/core: >= 1.32.0, < 1.34.3 → fixed in 1.34.3

Description

In MediaWiki before 1.31.9 and 1.32.x through 1.34.x before 1.34.3, Special:UserRights exposes the existence of hidden users.

Related

Alias · CVE (1)

  • CVE-2020-25813 In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users. vulnerability

References