CVE-2019-18611

—

CVSS 3.1

6.5 medium

EPSS

<1%p58

Published

Oct 29, 2019 (Oct 29, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available via the MediaWiki API was potentially visible to users with various levels of access to this extension. Said users should not have been able to view these oversighted edit summaries via the MediaWiki API.

Vendors: mediawiki
Products: checkuser
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.