Dannys712

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.36.3 **Description** An issue was discovered in the GlobalWatchlist extension where the rev-deleted-user and ntimes messages were not properly escaped, allowing users to inject HTML and JavaScript. **Recommendations** For versions prior to 1.36.3, update to version 1.36.3 or later to resolve the issue. As a temporary workaround, consider disabling the GlobalWatchlist extension until a patch is available. Restrict access to the rev-deleted-user and ntimes messages to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.37 Description: An issue was discovered in the AbuseFilter extension. If the `MediaWiki:Abusefilter-blocker` message is invalid within the content language, the filter user falls back to the English version, but that English version could also be invalid on a wiki. This would result in a fatal error, and potentially fail to block or restrict a potentially nefarious user. Recommendations: For MediaWiki versions prior to 1.37, update to a version that includes the fix for this issue to prevent potential fatal errors and ensure proper blocking or restriction of potentially nefarious users.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions 1.31 through 1.31.12 MediaWiki versions 1.32.x through 1.35.1 **Description** An issue was discovered in the VisualEditor extension. When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden, user, VisualEditor will disclose that the user exists. This is related to `ApiVisualEditor`. **Recommendations** For MediaWiki versions 1.31 through 1.31.12, update to version 1.31.13 or later. For MediaWiki versions 1.32.x through 1.35.1, update to version 1.35.2 or later. As a temporary workaround, consider restricting access to the `ApiVisualEditor` until a patch is available.

**Name of the Vulnerable Software and Affected Versions** MediaWiki CentralAuth extension versions through REL1 34 **Description** The issue allows remote attackers to obtain sensitive hidden account information. This can be done via the "api.php?action=query&meta=globaluserinfo&guiuser=" request, which is accessible through the action API. Normally, access to this information would be denied when visiting the wiki/Special:CentralAuth page in a web browser. **Recommendations** For versions through REL1 34, consider disabling access to the "api.php?action=query&meta=globaluserinfo&guiuser=" endpoint until a patch is available. Restrict access to sensitive account information to minimize the risk of exploitation.