VulnerabilityModified
CVE-2023-45369
Usernames of hidden users are exposed.
MEDIUM 4.3EPSS 0.33%
Does this matter?
Lower severity and a low EPSS score (0.33%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Usernames of hidden users are exposed.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.33% probability · 26th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-732
- Affected
- mediawiki/mediawiki
- Source
- cve@mitre.org
References
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/960676Issue Tracking, Vendor Advisory
- https://phabricator.wikimedia.org/T344359Issue Tracking, Vendor Advisory
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/960676Issue Tracking, Vendor Advisory
- https://phabricator.wikimedia.org/T344359Issue Tracking, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.