Launchpad.net

CVE 2023-37300

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.

See the CVE page on Mitre.org for more details.