Security Advisory

CVE-2015-8007

4

Vulnerability Description

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification.
Published Date November 9, 2015
Official Source NIST NVD Advisory