NetSight
medium5.3

CVE-2023-37300

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3.

Impact

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.

Affected products

VendorProductAffected versions
MediawikiMediawiki
through 1.39.3

Weakness classification

References