CVE-2019-18987 - An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki

Back Back to CVE browser

MEDIUM

An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki

Published Nov 15, 2019

5.3

MEDIUM

CVSS 3.1

EPSS 1.11%

Description

An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public, its previous versions can be exposed, thus potentially disclosing private or sensitive information within the filter's definition.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

https://gerrit.wikimedia.org/r/q/Ic12790bd33982473f77551bde9599ed083a3e1f1
x_refsource_MISCPatchThird Party Advisory
https://phabricator.wikimedia.org/T237887
x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://www.mediawiki.org/wiki/Extension:AbuseFilter
x_refsource_MISCProductVendor Advisory

Link	Providers	Tags
https://gerrit.wikimedia.org/r/q/Ic12790bd33982473f77551bde9599ed083a3e1f1		x_refsource_MISCPatchThird Party Advisory
https://phabricator.wikimedia.org/T237887		x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://www.mediawiki.org/wiki/Extension:AbuseFilter		x_refsource_MISCProductVendor Advisory