Information Exposure

Overview mediawiki/core is a Free software wiki application developed by the Wikimedia Foundation and others. Note: This package is not maintained on Packagist anymore, but newer releases exist. Affected versions of this package are vulnerable to Information Exposure in the BlockListPager process...

CVE-2025-6589 With MultiBlocks enabled and a user who is suppressed via a MultiBlock, a user without 'hideuser' can see the hidden username in the BlockList

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue affects MediaWiki: = 1.42.0...

CVE-2025-6589

Summary (concrete details from provided documents): CVE-2025-6589 affects MediaWiki 1.42.0 and later, tied to the BlockListPager.Php file. An authenticated user with high privileges could exploit this to perform an information exposure (low impact on confidentiality), potentially disclosing suppr...