Information Disclosure in MediaWiki's ProofreadPage Extension
CVE-2023-37253

3.1LOW

Key Information:

Vendor

Mediawiki
Status
Proofreadpage
Vendor
CVE Published:
14 September 2026

What is CVE-2023-37253?

A flaw has been identified in the ProofreadPage extension for MediaWiki that allows unauthorized access to sensitive information. This vulnerability can expose suppressed user details through the API and configuration variables, potentially leading to privacy issues. Users of MediaWiki through version 1.39.3 should take immediate action to assess their systems and apply necessary patches to mitigate the risk of data exposure.

Affected Version(s)

ProofreadPage 0 < 1.35.11

ProofreadPage 1.36.0 < 1.38.7

ProofreadPage 1.39.0 < 1.39.4

References

https://phabricator.wikimedia.org/T326952

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.