Medium severity5.3NVD Advisory· Published Jun 30, 2023· Updated Jun 17, 2026

CVE-2023-37300

Description

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wikimedia Foundation/Mediawikillm-fuzzy
Range: <=1.39.3
MediaWiki/CheckUser extensionllm-fuzzy
Range: <=1.39.3
MediaWiki/CheckUser extensiondescription
osv-coords
pkg:bitnami/mediawiki
Range: < 1.39.4
MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Range: <=1.39.3

Patches

Vulnerability mechanics

References

phabricator.wikimedia.org/T330968nvdExploitPatchVendor Advisory
gerrit.wikimedia.org/r/q/I993fdcae1fedb7dd543b35a477026bc727615b0anvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000