CVE-2024-40598

Summary

CVE-2024-40598: MediaWiki's CheckUser extension, used up to version 1.42.1, contains a vulnerability that allows sensitive information from log events to be exposed despite being suppressed. This issue stems from the CheckUser API failing to apply the log_deleted attribute, leading to potential data leakage.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.