CVE-2023-37305

Summary

CVE-2023-37305 is a vulnerability affecting MediaWiki's ProofreadPage extension up to version 1.39.3. The issue lies in the PageContentHandler.php and PageDisplayHandler.php files where hidden users can be exposed through public interfaces. This means that sensitive user information could potentially be accessed by unauthorized individuals, posing a significant security risk to MediaWiki websites using the ProofreadPage extension. Organizations and individuals utilizing this extension are strongly advised to update to the latest version or implement alternative measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.