1. Home
  2. Security Advisories
  3. PHP (Composer)
  4. PHP:MEDIAWIKI-CORE-2020-25813

[PHP:MEDIAWIKI-CORE-2020-25813] Special:UserRights exposes the existence of hidden users

Severity Medium
Affected Packages 2
CVEs 1
Info Packages References Vulnerabilities
Special:UserRights exposes the existence of hidden users
Package Affected Version
pkg:composer/mediawiki/core >= 1.31.0, < 1.31.9
pkg:composer/mediawiki/core >= 1.34.0, < 1.34.3
ID
PHP:MEDIAWIKI-CORE-2020-25813
Severity
medium
Severity from
CVE-2020-25813
URL
https://phabricator.wikimedia.org/T232568
Published
2020-09-21T18:17:37
(4 years ago)
Modified
2020-10-19T19:26:52
(3 years ago)
Rights
PHP Security Advisories Database Team
Other Advisories
Source # ID Name URL
Security Advisory https://phabricator.wikimedia.org/T232568
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:composer/mediawiki/core mediawiki core >= 1.31.0 < 1.31.9
Affected pkg:composer/mediawiki/core mediawiki core >= 1.34.0 < 1.34.3
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date