Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Insecure Storage of Sensitive Information Vulnerability - CVE-2021-36127 - Vulnerability Database
MediaWiki

MediaWiki Insecure Storage of Sensitive Information Vulnerability - CVE-2021-36127

Medium
Reference: CVE-2021-36127
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-36127
Title: MediaWiki Insecure Storage of Sensitive Information Vulnerability
Overview:

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalUserRights page provided search results which for a suppressed MediaWiki user were different than for any other user thus easily disclosing suppressed accounts (which are supposed to be completely hidden).