未評価
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been mad...
CVE-2019-18987
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public, its previous versions can be exposed, thus potentially disclosing private or sensitive information within the filter's definition.
参照URL
- advisory mediawiki.org
- patch gerrit.wikimedia.org
- patch phabricator.wikimedia.org