MediaWiki 1.36.x < 1.39.5, 1.40.x < 1.40.1 Incorrect Permissions Vulnerability - Windows

MediaWiki is prone to an incorrect permissions vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki...

MediaWiki 1.36.x < 1.39.5, 1.40.x < 1.40.1 Incorrect Permissions Vulnerability - Linux

MediaWiki is prone to an incorrect permissions vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki...

CVE-2023-45364

Summary (CVE-2023-45364): MediaWiki 1.36.x–1.39.x before 1.39.5 and 1.40.x before 1.40.1 contains an information-disclosure vulnerability in includes/page/Article.php where deleted revision existence is leaked due to incorrect permission checks. An attacker could infer that a given revision ID be...