CVE-2026-100241

Published: Sep 29, 2026Modified: Sep 30, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://gerrit.wikimedia.org/r/q/I6d79037edc771fe9a2889c543e12cf7b1296aab8

Source: c4f26cc8-17ff-4c99-b5e2-38fc1793eacc

https://phabricator.wikimedia.org/T432948

Source: c4f26cc8-17ff-4c99-b5e2-38fc1793eacc

Timeline

No history available yet.