← All advisories

Medium severity6.5NVD Advisory· Published Oct 4, 2018· Updated Jun 17, 2026

CVE-2018-0504

CVE-2018-0504

Description

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mediawiki/corePackagist	>= 1.27.0, < 1.27.5	1.27.5
mediawiki/corePackagist	>= 1.29.0, < 1.29.3	1.29.3
mediawiki/corePackagist	>= 1.30.0, < 1.30.1	1.30.1
mediawiki/corePackagist	>= 1.31.0, < 1.31.1	1.31.1

Affected products

2

ghsa-coords
pkg:composer/mediawiki/core
Range: >= 1.27.0, < 1.27.5
MediaWiki/Mediawikiv5
Range: before 1.31.1, 1.30.1, 1.29.3 and 1.27.5

Patches

Vulnerability mechanics

References

9

lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.htmlnvdPatchVendor AdvisoryWEB
phabricator.wikimedia.org/T187638nvdPatchThird Party AdvisoryWEB
www.securitytracker.com/id/1041695nvdThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-hr8v-f4g2-p66fghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-0504ghsaADVISORY
www.debian.org/security/2018/dsa-4301nvdThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2019:3238nvdWEB
access.redhat.com/errata/RHSA-2019:3813nvdWEB
github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0504.yamlghsaWEB

News mentions

0

No linked articles in our index yet.