Lucene search

MitreVULNRICHMENT:CVE-2024-40597

HistoryJul 06, 2024 - 12:00 a.m.

CVE-2024-40597

2024-07-0600:00:00

mitre

github.com

cve-2024-40597

mediawiki

checkuser

log events

suppressed information

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. (The log_deleted attribute is not respected.)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:mediawiki:mediawiki:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediawiki",
    "product": "mediawiki",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.42.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

phabricator.wikimedia.org/T326865