Vulnerabilidades do The Wikimedia Foundation AbuseFilter

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam The Wikimedia Foundation AbuseFilter: 3 registro(s), com versões afetadas e correções.

CVE-2026-58027 Média · 6.5 CWE-200 01/07/2026

QueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UI

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

CVE-2026-34086 Baixa · 2.1 CWE-20 11/05/2026

AbuseFilter misuses ::userCanBitfield, exposing access-controlled information

Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2.

CVE-2025-6592 Baixa · 2.1 CWE-284 02/02/2026

Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0.