CVE-2023-45364

An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked. This reveals that a given revision ID belonged to the given page title, and its timestamp, both of which are not supposed to be public information.

• CWE-732

• https://phabricator.wikimedia.org/T264765Issue Tracking, Vendor Advisory
• https://www.debian.org/security/2023/dsa-5520Third Party Advisory
• https://phabricator.wikimedia.org/T264765Issue Tracking, Vendor Advisory
• https://www.debian.org/security/2023/dsa-5520Third Party Advisory

Published

Oct 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45359An issue was discovered in the Vector Skin component for Med…6.5
• CVE-2023-4536The My Account Page Editor WordPress plugin before 1.3.2 doe…8.8
• CVE-2023-45360An issue was discovered in MediaWiki before 1.35.12, 1.36.x …5.4
• CVE-2023-45361An issue was discovered in VectorComponentUserLinks.php in t…6.1
• CVE-2023-45362An issue was discovered in DifferenceEngine.php in MediaWiki…4.3
• CVE-2023-45363An issue was discovered in ApiPageSet.php in MediaWiki befor…7.5
• CVE-2023-45367An issue was discovered in the CheckUser extension for Media…6.5
• CVE-2023-45369An issue was discovered in the PageTriage extension for Medi…4.3
• CVE-2023-4537Comarch ERP XL client is vulnerable to MS SQL protocol downg…7.4
• CVE-2023-45370An issue was discovered in the SportsTeams extension for Med…5.3
• CVE-2023-45371An issue was discovered in the Wikibase extension for MediaW…7.5
• CVE-2023-45372An issue was discovered in the Wikibase extension for MediaW…5.3