medium4.3
CVE-2024-40598
An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1.
Impact
An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. (The log_deleted attribute is not applied to entries.)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.42.1 |