Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-16738

Fixed in a distro release EPSS 2%

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.

Published 2019-09-26 · CVE record · OSV

Products: mediawiki, fedoraproject fedora, debian_linux

Fixed upstream

EcosystemPackageFixed in
Packagistmediawiki/core1.31.4
Packagistmediawiki/core1.32.4
Packagistmediawiki/core1.33.1

Distro releases

ReleasePackageFixed in
Debian 10mediawiki1:1.31.4-1~deb10u1
Debian 12mediawiki1:1.31.4-1
Debian 13mediawiki1:1.31.4-1
Debian 14mediawiki1:1.31.4-1
Debian 9mediawiki1:1.27.7-1~deb9u2
Ubuntu 18.04 LTSmediawikino fix
Ubuntu 25.10mediawikino fix
Ubuntu 26.04 LTSmediawikino fix
Ubuntu 26.10mediawikino fix
Ubuntu Pro 20.04 LTSmediawikino fix
Ubuntu Pro 22.04 LTSmediawikino fix
Ubuntu Pro 24.04 LTSmediawikino fix