NetSight
high7.5

CVE-2024-40597

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1.

Impact

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. (The log_deleted attribute is not respected.)

Affected products

VendorProductAffected versions
MediawikiMediawiki
through 1.42.1

Weakness classification

References