MediaWiki Information Leak: Incorrect Handling of Actor ID

CVE-2020-25869 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of actor ID does not necessarily use the correct database or correct wiki.

Learn more about our Web Application Penetration Testing UK.