An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see edits for which the username has been hidden, because there is no check for rev_deleted.
References
| Link | Resource |
|---|---|
| https://phabricator.wikimedia.org/T327613 | Issue Tracking Patch |
| https://phabricator.wikimedia.org/T327613 | Issue Tracking Patch |
Configurations
History
18 Feb 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
21 Nov 2024, 07:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://phabricator.wikimedia.org/T327613 - Issue Tracking, Patch |
11 Apr 2023, 06:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://phabricator.wikimedia.org/T327613 - Issue Tracking, Patch | |
| CPE | cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| First Time |
Mediawiki mediawiki
Mediawiki |
|
| CWE | NVD-CWE-noinfo |
31 Mar 2023, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-31 19:15
Updated : 2025-02-18 16:15
NVD link : CVE-2023-29140
Mitre link : CVE-2023-29140
CVE.ORG link : CVE-2023-29140
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE