CVE-2023-45364

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Oct 9, 2023
Updated: Oct 12, 2023
CWE ID 732

Summary

CVE-2023-45364: MediaWiki versions 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1 contain a vulnerability in includes/page/Article.php. This issue results in the incorrect permissions check, leading to the disclosure of deleted revision existence. The sensitive information leaked includes the revision ID and timestamp, which are not meant to be publicly accessible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Mediawiki
  • Debian

Affected Vendors

  • Debian
  • Mediawiki