CVE-2019-18611

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-18611

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-18611.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-18611

Published

2019-10-29T19:15:19.843Z

Modified

2026-03-14T09:34:32.083829Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available via the MediaWiki API was potentially visible to users with various levels of access to this extension. Said users should not have been able to view these oversighted edit summaries via the MediaWiki API.

References

Affected packages

Git / github.com/wikimedia/mediawiki-extensions-checkuser

Affected ranges

Type

GIT

Repo

https://github.com/wikimedia/mediawiki-extensions-checkuser

Events

Introduced

Last affected

8f9478d9b9de3e53601128bde9e7d5bed51652ac

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.34"
        }
    ]
}

Affected versions

Other

REL1_19

REL1_20

REL1_21

REL1_22

REL1_28

REL1_29

REL1_30

REL1_34

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-18611.json"