CVE-2023-45369

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Oct 9, 2023

Updated: Oct 12, 2023

CWE ID 732

Summary

CVE-2023-45369: A vulnerability was found in the PageTriage extension of MediaWiki versions before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. This issue exposes the usernames of hidden users, potentially compromising their privacy and security within the MediaWiki platform. Users are advised to update their extensions to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Mediawiki

Affected Vendors

Mediawiki

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/s8Fs9a
https://www.cve.org/CVERecord?id=CVE-2023-45369
https://nvd.nist.gov/vuln/detail/CVE-2023-45369

Back to Vulnerability Database