CVE-2019-16528

HIGH 7.5CVE-2019-16528 · Published 20/03/2020 · updated 17/06/2026

In short

CVE-2019-16528 is a HIGH (CVSS 7.5) vulnerability affecting abusefilter (mediawiki).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
abusefilter mediawiki	`= 1.32= 1.33`	No fix yet

Description

An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL1_32 and REL1_33.

References

gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538051 · Patch
gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538053 · Patch
gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538054 · Patch
phabricator.wikimedia.org/T224203 · Permissions Required

More vulnerabilities in abusefilter

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free