Unrated severityNVD Advisory· Published Jun 30, 2023· Updated Nov 26, 2024

CVE-2023-37305

Description

An issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through 1.39.3. In includes/Page/PageContentHandler.php and includes/Page/PageDisplayHandler.php, hidden users can be exposed via public interfaces.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MediaWiki/ProofreadPagedescription
MediaWiki/ProofreadPagellm-create
Range: <=1.39.3
MediaWiki/Mediawikillm-fuzzy
Range: <=1.39.3
osv-coords
pkg:bitnami/mediawiki
Range: < 1.39.4

Patches

Vulnerability mechanics

References

gerrit.wikimedia.org/r/q/Ibe5f8e25dea155bbd811a65833394c0d4b906a34mitre
phabricator.wikimedia.org/T326952mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000