CVE-2024-40596

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jul 7, 2024

Updated: Jul 9, 2024

CWE ID 532

Summary

CVE-2024-40596 is a vulnerability affecting the CheckUser extension in MediaWiki versions up to 1.42.1. It permits the exposure of suppressed information for log events through the Special:Investigate feature. The TimelineService in MediaWiki fails to properly suppress such information, leading to potential unintended disclosure. This issue may pose a privacy concern for users whose data was intended to be hidden. MediaWiki users are advised to upgrade to a patched version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Mediawiki

Affected Vendors

Mediawiki

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/w3FXe5
https://www.cve.org/CVERecord?id=CVE-2024-40596
https://nvd.nist.gov/vuln/detail/CVE-2024-40596

Back to Vulnerability Database