Unrated severityNVD Advisory· Published Nov 9, 2015· Updated May 6, 2026
CVE-2015-8007
CVE-2015-8007
Description
The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification.
Affected products
1- cpe:2.3:a:echo_project:echo:*:*:*:*:*:mediawiki:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000182.htmlnvdPatchVendor Advisory
- phabricator.wikimedia.org/T110553nvdVendor Advisory
- www.securitytracker.com/id/1034028nvd
News mentions
0No linked articles in our index yet.