← Database

CVE-2024-40598

MEDIUM CVSS: 4.3 Published: 2024-07-07 Modified: 2026-06-17

Description

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. (The log_deleted attribute is not applied to entries.)

Affected Platforms

Mediawiki Mediawiki

Weakness Type

CWE-532, CWE-532

References