CVE-2019-16738

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Sep 26, 2019
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2019

CVE-2019-16748.8A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authCVE-2019-167438.8eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.CVE-2019-167448.8eBrigade before 5.0 has evenements.php cid SQL Injection.CVE-2019-167458.8eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.CVE-2019-167469.8An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in aCVE-2019-167477.5In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via CVE-2019-167489.8In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. SpecificalCVE-2019-16757.5A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart tCVE-2019-167516.1An issue was discovered in Devise Token Auth through 1.1.2. The omniauth failure endpoint is vulnerable to Reflected Cross Site Scripting (XCVE-2019-167524.3An issue was discovered in Decentralized Anonymous Payment System (DAPS) through 2019-08-26. It is possible to force wallets to send HTTP reCVE-2019-167537.5An issue was discovered in Decentralized Anonymous Payment System (DAPS) through 2019-08-26. The content to be signed is composed of a repreCVE-2019-167547.5RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a netwo
CVE-2019-16738: Medium severity, CVSS 5.3 | Vulnix