CVE-2019-16528: High severity mediawiki abusefilter vulnerability
An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL132 and REL133.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-16528?
CVE-2019-16528 is a vulnerability in the AbuseFilter extension for MediaWiki that allows attackers to obtain sensitive information from AbuseLog revision data.
How does CVE-2019-16528 affect MediaWiki?
CVE-2019-16528 affects MediaWiki versions 1.32 and 1.33.
What is the severity of CVE-2019-16528?
CVE-2019-16528 has a severity rating of 7.5 (high).
How can an attacker exploit CVE-2019-16528?
An attacker can exploit CVE-2019-16528 by using the AbuseFilter extension to obtain sensitive information from AbuseLog revision data.
Are there any patches or fixes available for CVE-2019-16528?
Yes, patches and fixes are available for CVE-2019-16528. Please refer to the provided references for more information.