Incorrect Access Control in Wikimedia MediaWiki through 1.32.1: Exposed Suppressed Log in RevisionDelete Page

Incorrect Access Control in Wikimedia MediaWiki through 1.32.1: Exposed Suppressed Log in RevisionDelete Page

CVE-2019-12470 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

Learn more about our Web Application Penetration Testing UK.