CVE Catalog
CVE-2023-37300
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.56%
42th percentile - higher than 42% of all known CVEs
Summary
An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.
Risk Assessment
Incorrect access control may lead to the exposure of information about hidden users, posing a privacy risk.
Recommendation
It is recommended to update the CheckUser extension to the latest version to fix the access control issue.
Original NVD description (English source)
An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.