An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL132 and REL133.
{
"cpe": [
"cpe:2.3:a:mediawiki:abusefilter:1.32:*:*:*:*:mediawiki:*:*",
"cpe:2.3:a:mediawiki:abusefilter:1.33:*:*:*:*:mediawiki:*:*"
],
"extracted_events": [
{
"introduced": "1.32"
},
{
"last_affected": "1.32"
},
{
"introduced": "1.33"
},
{
"last_affected": "1.33"
}
],
"source": "CPE_STRING"
}