CVE-2023-37305: Medium severity MediaWiki MediaWiki vulnerability
Published Jun 30, 2023
·Updated
An issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through 1.39.3. In includes/Page/PageContentHandler.php and includes/Page/PageDisplayHandler.php, hidden users can be exposed via public interfaces.
Affected Software
1 affected component
MediaWiki MediaWiki<=1.39.3
Remediation
Patch Available
Event History
Jun 30, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-37305.
2
What is the severity level of CVE-2023-37305?
The severity level of CVE-2023-37305 is medium with a score of 5.3.
3
Which software versions are affected by CVE-2023-37305?
CVE-2023-37305 affects Mediawiki versions up to and including 1.39.3.
4
What is the issue with the ProofreadPage extension in Mediawiki?
The issue in the ProofreadPage extension allows hidden users to be exposed via public interfaces.
5
Is there a fix available for CVE-2023-37305?
Please refer to the references provided for information on available fixes or patches for CVE-2023-37305.