CVE-2026-100377

Published: Set 25, 2026 Last Modified: Set 25, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 6,9

Source: c4f26cc8-17ff-4c99-b5e2-38fc1793eacc

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

AI Translation Available

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation.

This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

200

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Confidentiality

Potential Impacts:

Read Application Data

Technologies: Not Technology-Specific, Web Based, Mobile

Likelihood of Exploit: High

https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WikiLambda/+/1320186