← Back to CVE List

CVE-2021-36127

Published: 2021-07-02T13:15Z
Last Modified: 2024-11-21T06:13Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalUserRights page provided search results which, for a suppressed MediaWiki user, were different than for any other user, thus easily disclosing suppressed accounts (which are supposed to be completely hidden). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt