ID |
CVE-2022-41766
|
Sažetak |
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name (when the user has been revision deleted/suppressed). |
Reference |
|
CVSS |
Base: | 4.3 |
Impact: | 1.4 |
Exploitability: | 2.8 |
|
Pristup |
Vektor | Složenost | Autentikacija |
NETWORK |
LOW |
- |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
LOW |
NONE |
NONE |
|
CVSS vektor |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Zadnje važnije ažuriranje |
05-06-2023 - 14:24 |
Objavljeno |
29-05-2023 - 21:15 |