Approved changes feed: RSS · Atom

cpe:2.3:a:the_wikimedia_foundation:mediawiki_-_centralauth_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Wikimedia Foundation (dcdf6756-005f-5e7c-83d8-02490e2a2a68)
ProductMediawiki Centralauth Extension (21837863-40ac-55d3-a4ba-4f297b11a561)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39937 not_vulnerable 2026-06-03 15:22:13.296445 Global vanishing does not completely remove user email
Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure. The issue has been remediated on the `master` branch, and in the release branches for MediaWiki versions 1.43, 1.44, and 1.45.
Published: 2026-04-07T21:44:46.515Z
Updated: 2026-04-08T21:58:19.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62669 vulnerable 2026-06-03 15:09:34.927734 UserInfoCard: activeLocalBlocksAllWikis does not do permissions checks
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39.
Published: 2025-10-18T04:34:34.614Z
Updated: 2025-10-20T16:28:10.550Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.