CVE-2019-18611: Infoleak
An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available via the MediaWiki API was potentially visible to users with various levels of access to this extension. Said users should not have been able to view these oversighted edit summaries via the MediaWiki API.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18611?
CVE-2019-18611 has been rated as a medium severity vulnerability.
How do I fix CVE-2019-18611?
To fix CVE-2019-18611, update the CheckUser extension to a version later than 1.34.
Who is affected by CVE-2019-18611?
Users with access to the CheckUser extension prior to version 1.34 may be affected by CVE-2019-18611.
What type of information is exposed in CVE-2019-18611?
CVE-2019-18611 allows sensitive oversighted edit summaries to be visible to unauthorized users through the MediaWiki API.
Is CVE-2019-18611 related to MediaWiki versions?
Yes, CVE-2019-18611 specifically impacts MediaWiki versions up to and including 1.34.