CVE-2025-23074

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - SocialProfile Extension allows Functionality Misuse.This issue affects Mediawiki - SocialProfile Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2...

CVE-2025-23074

creationtimestamp| type| source ---|---|--- 2025-01-14 19:10:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1576 2025-01-14 19:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxnuvt7k2t 2025-01-14 20:42:06+00:00| seen| https://t.me/cvedetector/15333...

CVE-2025-23074 Special:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - SocialProfile Extension allows Functionality Misuse.This issue affects Mediawiki - SocialProfile Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2...

CVE-2025-23074

The Wikimedia Foundation MediaWiki - SocialProfile Extension is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Specifically, the EditProfile function exposes the contents of profile fields marked as "hidden" , "friends" , or "friends of friends" when a ...

CVE-2025-23074 Special:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - SocialProfile Extension allows Functionality Misuse.This issue affects Mediawiki - SocialProfile Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2...