Unrated severityNVD Advisory· Published Jun 30, 2023· Updated Nov 27, 2024

CVE-2023-37300

Description

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MediaWiki/CheckUser extensiondescription
MediaWiki/Checkuserllm-fuzzy
Range: <=1.39.3
osv-coords
pkg:bitnami/mediawiki
Range: < 1.39.4

Patches

Vulnerability mechanics

References

gerrit.wikimedia.org/r/q/I993fdcae1fedb7dd543b35a477026bc727615b0amitre
phabricator.wikimedia.org/T330968mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000