PT-2019-15537 · Mediawiki · Mediawiki Abusefilter Extension

Luke081515 · Publicado 2019-10-29 · Atualizado 2019-10-31 · CVE-2019-18612

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki AbuseFilter extension versions through 1.34

Description An issue in the AbuseFilter extension allows unprivileged users to view previously hidden filters or their differences, potentially disclosing sensitive information.

Recommendations For versions through 1.34, update to a version that contains a fix for this issue to prevent the disclosure of sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2019-18612

Produtos afetados

Mediawiki Abusefilter Extension

Referências · 4

• https://gerrit.wikimedia.org/r/q/Ie23e8234ae550273bf3f6f9c5ac45b7fc54eec2a · Aviso do Fabricante
• https://phabricator.wikimedia.org/T104807 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18612 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-18612 · Aviso do Fabricante