Description (CNA)
An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MediaWiki / ProofreadPage | affected 0 before 1.35.11; affected 1.36.0 before 1.38.7; affected 1.39.0 before 1.39.4 |
CWE
CWE-669
References
ADP enrichment
No English description supplied.