Design/Logic Flaw

2020-03-2021:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL1_32 and REL1_33.

CPENameOperatorVersion
abusefiltereq1.32
abusefiltereq1.33

CPE	Name	Operator	Version
	abusefilter	eq	1.32
	abusefilter	eq	1.33

References

gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538051/

gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538053/

gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538054/

phabricator.wikimedia.org/T224203