What is GHSA-c4rj-wrmq-52rj?

GHSA-c4rj-wrmq-52rj is a security advisory published by GitHub Security Advisories with Medium severity. MediaWiki Special:UserRights exposes the existence of hidden users

Which CVE IDs does GHSA-c4rj-wrmq-52rj cover?

GHSA-c4rj-wrmq-52rj covers the following CVE IDs: CVE-2020-25813. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c4rj-wrmq-52rj?

GHSA-c4rj-wrmq-52rj has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-c4rj-wrmq-52rj?

GHSA-c4rj-wrmq-52rj affects 2 products, including: composer/mediawiki/core:\u003e= 1.31.0, \u003c 1.31.9; composer/mediawiki/core:\u003e= 1.32.0, \u003c 1.34.3.

GHSA-c4rj-wrmq-52rjMediumCVSS 5.3

MediaWiki Special:UserRights exposes the existence of hidden users

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

May 17, 2024

🔗 CVE IDs covered (1)

CVE-2020-25813 →

📋 Description

In MediaWiki before 1.31.9 and 1.32.x through 1.34.x before 1.34.3, Special:UserRights exposes the existence of hidden users.

🎯 Affected products2

composer/mediawiki/core:>= 1.31.0, < 1.31.9
composer/mediawiki/core:>= 1.32.0, < 1.34.3

🔗 References (9)

https://nvd.nist.gov/vuln/detail/CVE-2020-25813
https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
https://meta.wikimedia.org/wiki/Special:UserRights
https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25813.yaml
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
https://lists.fedoraproject.org/archives/list/[email protected]/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
https://phabricator.wikimedia.org/T232568
https://github.com/advisories/GHSA-c4rj-wrmq-52rj