Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-62j4-5x45-jvf3

Опубликовано: 03 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.7
CVSS3: 4.8

Описание

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php.

This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php.

This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.

EPSS

Процентиль: 12%
0.0022
Низкий

1.7 Low

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.8
ubuntu
6 месяцев назад

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.

CVSS3: 4.8
nvd
6 месяцев назад

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.

CVSS3: 4.8
debian
6 месяцев назад

Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...

CVSS3: 4.8
fstec
6 месяцев назад

Уязвимость программного средства для реализации гипертекстовой среды MediaWiki, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 5.3
redos
4 месяца назад

Уязвимость mediawiki

EPSS

Процентиль: 12%
0.0022
Низкий

1.7 Low

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-200