MediaWiki Information Disclosure Vulnerability (CNVD-2019-18906)

MediaWiki is a free software open source wiki package written in PHP, originally used for Wikipedia, but now also used by several other projects of the non-profit Wikimedia Foundation and many other wikis. MediaWiki suffers from an information disclosure vulnerability that can be exploited by a...

When a log event is (partially) hidden Special:Redirect/logid can link to the incorrect log and reveal hidden information

More info at https://phabricator.wikimedia.org/T187638...