CVE Vulnerabilities

CVE-2026-103440

Exposure of Sensitive Information Through Data Queries

Published: Sep 30, 2026 | Modified: Sep 30, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation.

This issue affects MediaWiki PageTriage extension: 1.46, 1.45, and 1.43.

Weakness

When trying to keep information confidential, an attacker can often infer some of the information by using statistics.

Potential Mitigations

References