Beveiligingsadvies

CVE-2023-29137

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-03-31 00:00:00

Laatst bijgewerkt 2025-02-14 19:27:24

Toegewezen door mitre

CVSS-score 4.3

Status PUBLISHED

Beschrijving

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users.

← Alle CVE's bekijken Bekijk op cve.org ↗