| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki/core | ≥ 1.31.0, < 1.31.4≥ 1.32.0, < 1.32.4≥ 1.33.0, < 1.33.1 | 1.31.41.32.41.33.1 |
| mediawiki | ≥ 1.31.0, < 1.31.4≥ 1.32.0, < 1.32.4≥ 1.33.0, < 1.33.1 | 1.31.41.32.41.33.1 |
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free