7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
20.7%
An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users.
phabricator.wikimedia.org/T328643