1. Home
  2. CVE Database
  3. CVE-2022-39193
MEDIUM · 5.3

CVE-2022-39193

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension can expose information on the performer of edits and logged actions. This informat...

Vulnerability Description

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension can expose information on the performer of edits and logged actions. This information should not allow public viewing: it is supposed to be viewable only by users with suppression rights.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
MediawikiMediawiki1.39.0

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2022-39193?

CVE-2022-39193 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension can expose information on the performer of edits and logged actions. This informat...

How severe is CVE-2022-39193?

CVE-2022-39193 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-39193?

Check the references section above for vendor advisories and patch information. Affected products include: Mediawiki Mediawiki.