What’s Vulnerable › Vulnerabilities

CVE-2019-16528

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-20 · updated 2026-06-17
• Weakness: CWE-532

Description

An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL1_32 and REL1_33.

Affected products

• Wikimedia Foundation AbuseFilter: 1.32, 1.33

References

• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538051/
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538053/
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538054/
• https://phabricator.wikimedia.org/T224203
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538051/
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538053/
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538054/
• https://phabricator.wikimedia.org/T224203

Get alerted when CVE-2019-16528 or the next vulnerability affects your stack