Mediawiki Flaggedrevs Extension
Monthly
Information disclosure in the MediaWiki FlaggedRevs extension through 1.46.0 allows unauthenticated remote attackers to obtain limited sensitive information that the extension fails to remove before storage or transfer, per CWE-212. Only MediaWiki installations with the optional FlaggedRevs extension enabled are affected; wikis without it are not exposed. No public exploit identified at time of analysis, and SSVC records exploitation as none, making this a moderate-severity, low-to-medium operational priority.
Information disclosure in the MediaWiki FlaggedRevs extension through 1.46.0 allows unauthenticated remote attackers to obtain limited sensitive information that the extension fails to remove before storage or transfer, per CWE-212. Only MediaWiki installations with the optional FlaggedRevs extension enabled are affected; wikis without it are not exposed. No public exploit identified at time of analysis, and SSVC records exploitation as none, making this a moderate-severity, low-to-medium operational priority.