Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-45362
HistoryNov 03, 2023 - 5:15 a.m.

Design/Logic Flaw

2023-11-0305:15:00
PRIOn knowledge base
www.prio-n.com
5
differenceengine.php
mediawiki
information leak
username suppression
security issue

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. diff-multi-sameuser (aka “X intermediate revisions by the same user not shown”) ignores username suppression. This is an information leak.

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%