Lucene search

K
cvelistMitreCVELIST:CVE-2023-45364
HistoryOct 09, 2023 - 12:00 a.m.

CVE-2023-45364

2023-10-0900:00:00
mitre
www.cve.org
1
mediawiki
security
permissions

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked. This reveals that a given revision ID belonged to the given page title, and its timestamp, both of which are not supposed to be public information.

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%