Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-36127
HistoryJul 02, 2021 - 1:15 p.m.

Design/Logic Flaw

2021-07-0213:15:00
PRIOn knowledge base
www.prio-n.com
3

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalUserRights page provided search results which, for a suppressed MediaWiki user, were different than for any other user, thus easily disclosing suppressed accounts (which are supposed to be completely hidden).

CPENameOperatorVersion
mediawikile1.36

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

Related for PRION:CVE-2021-36127