Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-47913

An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. An API caller can match a filter condition against AbuseFilter logs even if the caller is not authorized to view the log details for the filter.

Published

2024-10-04T22:15:02.687

Last Modified

2025-06-17T15:54:48.687

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-532
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mediawiki mediawiki < 1.39.9 Yes
Application mediawiki mediawiki < 1.41.3 Yes
Application mediawiki mediawiki < 1.42.2 Yes
References