Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability - CVE-2021-30153 - Vulnerability Database
MediaWiki

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability - CVE-2021-30153

Medium
Reference: CVE-2021-30153
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-30153
Title: MediaWiki Exposure of Resource to Wrong Sphere Vulnerability
Overview:

An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. . When using VisualEditor to edit a MediaWiki user page belonging to an existing but hidden user VisualEditor will disclose that the user exists. (It shouldn39t because they are hidden.) This is related to ApiVisualEditor.