Lucene search
PRIOn knowledge basePRION:CVE-2023-29137HistoryMar 31, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-03-3119:15:00
PRIOn knowledge base
www.prio-n.com
5
design flaw
logic flaw
mediawiki
userimpacthandler
growthexperiments
user de-anonymization
An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users.
References
Related
cve
cve
CVE-2023-29137
2023-03-31 19:15:07
cvelist
cvelist
CVE-2023-29137
2023-03-31 00:00:00
osv
osv
CVE-2023-29137
2023-03-31 19:15:07
BIT-mediawiki-2023-29137
2024-03-06 11:02:22
nvd
nvd
CVE-2023-29137
2023-03-31 19:15:07