← All advisories

Medium severity6.5OSV Advisory· Published Jul 1, 2026· Updated Jul 9, 2026

CVE-2026-58033

CVE-2026-58033

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.

This vulnerability is associated with program files includes/Actions/InfoAction.Php.

This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Affected products

4

MediaWiki/MediawikiOSV3 versions
1.43.8, 1.44.5, 1.45.3, …+ 2 more
- (no CPE)range: 1.43.8, 1.44.5, 1.45.3, …
- cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: >=1.43.0,<1.43.9
- cpe:2.3:a:mediawiki:mediawiki:1.46.0:rc0:*:*:*:*:*:*
Wikimedia Foundation/Mediawikillm-fuzzy
Range: <1.46.0, 1.45.4, 1.44.6, 1.43.9

Patches

Vulnerability mechanics

References

1

phabricator.wikimedia.org/T427235nvdPermissions Required

News mentions

0

No linked articles in our index yet.