PT-2021-19419

CVE-2021-31549

Published

2021-04-22

Updated

2024-03-06

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.35.2 AbuseFilter extension for MediaWiki through 1.35.2

Description An issue in the AbuseFilter extension for MediaWiki allows the disclosure of suppressed MediaWiki usernames to unprivileged users through the Special:AbuseFilter/examine form.

Recommendations For MediaWiki versions through 1.35.2, update to a version that contains a fix for this issue. For the AbuseFilter extension, restrict access to the Special:AbuseFilter/examine form until a patch is available.

Exploitability

Fix

Impacts

Researchers

Daimona

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers

CVE-2021-31549

ALT-PU-2021-1991