CVE-2025-53625
DynamicPageList3 exposes hidden/suppressed usernames
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
DynamicPageList3 exposes hidden/suppressed usernames
The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. Several #dpl parameters can leak usernames that have been hidden using revision deletion, suppression, or the hideuser block flag. The vulnerability is fixed in 3.6.4.
Reserved 2025-07-07 | Published 2025-07-10 | Updated 2025-07-10 | Assigner GitHub_MCWE-359: Exposure of Private Personal Information to an Unauthorized Actor
github.com/...eList3/security/advisories/GHSA-7pgw-q3qp-6pgq
github.com/...ommit/a3dae0c89fb4214390c29ceffa23bbe2099986d6
Support options
