CVE-2025-23073

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

CVE-2025-23073

CVE-2025-23073 affects the MediaWiki GlobalBlocking Extension. The vulnerability can lead to exposure of embedded sensitive data via the API (globalblocks list potentially revealing the autoblock IP when username/IP are included in the bgtargets parameter); it briefly impacted the master branch. ...

CVE-2025-23073 API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...