CVE-2022-41766

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p46

Published

May 29, 2023 (May 29, 2023)

Modified

Jun 17, 2026

Description

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name (when the user has been revision deleted/suppressed).

Vendors: mediawiki
Products: mediawiki
Weakness: CWE-732
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.