CVE-2023-37253

LowCVSS 3.1/10Last modified Sep 16, 2026

Description

An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables.

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-669

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 14, 2026
Last modified
Sep 16, 2026
NVD status
Awaiting Analysis

Related CVEs from 2023

CVE-2023-372546.1An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item wheCVE-2023-372556.1An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the "get edits" type is vuCVE-2023-372566.1An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and autoCVE-2023-372575.4DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset have a stored cross-sitCVE-2023-372589.8DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulnerability that can byCVE-2023-372595.4matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. The Export Chat feature includes certain attaCVE-2023-37266.9OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.CVE-2023-372607.5league/oauth2-server is an implementation of an OAuth 2.0 authorization server written in PHP. Starting in version 8.3.2 and prior to versioCVE-2023-372618.8OpenComputers is a Minecraft mod that adds programmable computers and robots to the game. This issue affects every version of OpenComputers CVE-2023-372628.8CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to versions 1.20.1-1.106.0, 1.19.CVE-2023-372632.7Strapi is the an open-source headless content management system. Prior to version 4.12.1, field level permissions are not respected in the rCVE-2023-372644.3Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.35.0, pipelines do not vali
CVE-2023-37253: Low severity, CVSS 3.1 | Vulnix