CVE-2019-16529: Medium severity mediawiki checkuser vulnerability
Published Mar 19, 2020
·Updated
An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit summaries are still visible in CheckUser results in violation of MediaWiki's permissions model.
Affected Software
1 affected component
MediaWiki Checkuser Mediawiki<=1.35
Remediation
Event History
Mar 19, 2020
CVE Published
via MITRE·10:51 PM
Data Sourced
via MITRE·10:51 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-16529?
CVE-2019-16529 is classified as a medium severity vulnerability due to the exposure of sensitive edit summaries.
2
How do I fix CVE-2019-16529?
To fix CVE-2019-16529, update the CheckUser extension to version 1.35.1 or later.
3
What versions of CheckUser are affected by CVE-2019-16529?
CVE-2019-16529 affects all versions of the CheckUser extension up to and including 1.35.0.
4
What type of information is exposed in CVE-2019-16529?
CVE-2019-16529 exposes oversighted edit summaries that should not be visible according to MediaWiki's permissions model.
5
Is CVE-2019-16529 specific to certain MediaWiki installations?
CVE-2019-16529 is specific to installations of MediaWiki that use the CheckUser extension up to version 1.35.0.