Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2020-35480 - Vulnerability Database
MediaWiki

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2020-35480

Medium
Reference: CVE-2020-35480
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-35480
Title: MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don39t exist) and hidden users (accounts that have been explicitly hidden due to being abusive or similar) that the viewer cannot see are handled differently exposing sensitive information about the hidden status to unprivileged viewers. This exists on various code paths.