CVE-2020-15164

CVE-2020-15164 affects Scratch Login (MediaWiki extension). Before v1.1, an attacker could log into any account by using a username with leading, trailing, or repeated underscores, which MediaWiki trims as whitespace. Root cause: underscores are treated as whitespace and trimmed, enabling authent...