Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data.
This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Wed, 15 Jan 2025 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data.This issue affects Mediawiki - GlobalBlocking Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2. | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension. |
Tue, 14 Jan 2025 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data.This issue affects Mediawiki - GlobalBlocking Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2. | |
| Title | API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter | |
| Weaknesses | CWE-200 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: wikimedia-foundation
Published: 2025-01-14T18:45:31.542Z
Updated: 2025-01-15T15:57:06.582Z
Reserved: 2025-01-10T17:00:37.684Z
Link: CVE-2025-23073
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-01-14T19:15:45.120
Modified: 2025-01-15T16:15:42.933
Link: CVE-2025-23073
Redhat
No data.