| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | = 1.40.0≥ 1.36.0, < 1.39.5< 1.35.12 | 1.39.51.35.12 |
An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. diff-multi-sameuser (aka "X intermediate revisions by the same user not shown") ignores username suppression. This is an information leak.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free