What is CVE-2019-16528?

CVE-2019-16528 is a high-severity vulnerability in MediaWiki Abusefilter, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2020-03-20.

How severe is CVE-2019-16528?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in MediaWiki Abusefilter

CVE-2019-16528

An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL1_32 and REL1_33.

Published 2020-03-20 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.013 (69.7th percentile), scored 2026-10-01.

Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 69.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000

Affected products

MediaWiki Abusefilter — versions 1.32, 1.33

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

phabricator.wikimedia.org/T224203 (Permissions Required)
gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538051/ (Patch)
gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538053/ (Patch)
gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538054/ (Patch)

Frequently asked questions

What is CVE-2019-16528?: CVE-2019-16528 is a high-severity vulnerability in MediaWiki Abusefilter, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2020-03-20.
How severe is CVE-2019-16528?: High severity. CVSS v3 base score is 7.5 out of 10.