CVE-2024-29883

Katalog CVE

CVSS 4.9 · Medium EPSS 0,60%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada miraheze createwiki. Skor CVSS 3.1 4.9 (Medium) menurut github.com.

Deskripsi (NVD)

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Suppression of wiki requests does not work as intended, and always restricts visibility to those with the `(createwiki)` user right regardless of the settings one sets on a given wiki request. This may expose information to users who are not supposed to be able to access it.

Rincian

Terbit di NVD

26 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,60% peluang dieksploitasi; lebih tinggi dari 47,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/miraheze/CreateWiki/security/advisories/GHSA-8wjf-mxjg-j8p9 patch · advisory vendor
• https://gist.githubusercontent.com/redbluegreenhat/0da1ebb7185b241ce1ac6ba1e8f0b98d/raw/44c4a229aacc8233808c76... patch
• https://issue-tracker.miraheze.org/T11993 exploit · issue tracking