Sensitive Data Exposure in MediaWiki AbuseFilter Extension
CVE-2019-16528

7.5HIGH

Key Information:

Vendor: Mediawiki
Status: Abusefilter
Vendor: CVE Published:; 20 March 2020

What is CVE-2019-16528?

A vulnerability exists in the AbuseFilter extension for MediaWiki that allows unauthorized attackers to access sensitive information. Specifically, attackers can retrieve deleted or suppressed usernames and summaries from AbuseLog revision data through certain PHP scripts. This issue impacts versions REL1_32 and REL1_33, posing potential privacy risks to users and undermining the integrity of the system.