CVE-2022-41765

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. HTMLUserTextField exposes the existence of hidden users.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2022-12-26

Last modified

2025-04-14

Weaknesses

CWE-203

Affected products

• Mediawiki (Mediawiki)

References

• https://phabricator.wikimedia.org/T309894
• https://security.gentoo.org/glsa/202305-24