CVE-2024-40596

Name of the Vulnerable Software and Affected Versions MediaWiki CheckUser extension versions through 1.42.1

Description The Special:Investigate feature can expose suppressed information for log events due to the TimelineService not supporting proper suppression.

Recommendations For versions through 1.42.1, consider disabling the Special:Investigate feature until a patch is available to prevent the exposure of suppressed information. Restrict access to the TimelineService to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.