Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-37305
HistoryJun 30, 2023 - 12:00 a.m.

CVE-2023-37305

2023-06-3000:00:00
ubuntu.com
ubuntu.com
9
cve-2023-37305
issue discovered
proofreadpage
mediawiki
pagecontenthandler
pagedisplayhandler
hidden users
public interfaces
unix

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

30.0%

An issue was discovered in the ProofreadPage (aka Proofread Page) extension
for MediaWiki through 1.39.3. In includes/Page/PageContentHandler.php and
includes/Page/PageDisplayHandler.php, hidden users can be exposed via
public interfaces.

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

30.0%

Related for UB:CVE-2023-37305