What is CVE-2019-18611?

CVE-2019-18611 is a medium-severity vulnerability in Mediawiki Checkuser, classified under Information Disclosure. CVSS score: 6.5/10. Published 2019-10-29.

How severe is CVE-2019-18611?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in Mediawiki Checkuser

CVE-2019-18611

An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available via the MediaWiki API was potentially visible to users with various levels of acc…

Vulnerability class: Information Disclosure

EPSS: 0.009 (56.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Mediawiki Checkuser
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-18611?: CVE-2019-18611 is a medium-severity vulnerability in Mediawiki Checkuser, classified under Information Disclosure. CVSS score: 6.5/10. Published 2019-10-29.
How severe is CVE-2019-18611?: Medium severity. CVSS v3 base score is 6.5 out of 10.