CVE-2023-37300

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3

published June 30, 2023

CVSS
—
EPSS
1%
Percentile
51.5
In the wild
Unconfirmed
What it is

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00672 · 51.5th percentile
Published
2023-06-30T00:00Z
EPSS history
Timeline
  • 30 JUN 00:00Z
    An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3
    cvelistv5