| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | ≤ 1.39.3 |
An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free