Unrated
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been mad...
CVE-2019-18987
First seen on SecPulse
Original description The description as published by the source.
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public, its previous versions can be exposed, thus potentially disclosing private or sensitive information within the filter's definition.
References
- advisory mediawiki.org
- patch gerrit.wikimedia.org
- patch phabricator.wikimedia.org