CVE-2024-40598

MEDIUM4.3EPSS 0.14%
發布日:2024/7/10修改日:2025/9/3

描述

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. (The log_deleted attribute is not applied to entries.)

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

參考連結(2)

CVE-2024-40598 · VulnScope