Unrated

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see edits for which the username h...

CVE-2023-29140 First seen on SecPulse Mar 31, 2023

Original description The description as published by the source.

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see edits for which the username has been hidden, because there is no check for rev_deleted.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web phabricator.wikimedia.org

Key facts

Severity: Unrated
Published: Mar 31, 2023
First seen on SecPulse: Mar 31, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:02