CVE-2020-35480

Katalog CVE

CVSS 5.3 · Medium EPSS 1,5%

Kerentanan Observable Discrepancy pada mediawiki, debian linux +1 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the viewer cannot see are handled differently, exposing sensitive information about the hidden status to unprivileged viewers. This exists on various code paths.

Rincian

Terbit di NVD

18 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-203: Observable Discrepancy

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html mailing list · release notes · advisory vendor
• https://lists.debian.org/debian-lts-announce/2020/12/msg00034.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2020/dsa-4816 mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH...
• https://phabricator.wikimedia.org/T120883 permissions required