All packages
CheckUser extension for MediaWiki vulnerabilities
3 known CVE vulnerabilities in CheckUser extension for MediaWiki, translated and rated.
- CVE-2023-37303Critical
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3, where an attempt to block a user fails after a temporary browser hang, resulting in a DBQueryDisconnectedError error message.
- CVE-2023-37300Medium
An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.
- CVE-2023-37255Medium
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the 'get edits' type is vulnerable to HTML injection through the User-Agent HTTP request header.