{"id":"CVE-2019-16738","details":"In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.","aliases":["GHSA-7hwr-f745-5rwq"],"modified":"2026-07-08T05:55:32.556387215Z","published":"2019-09-26T02:15:10.833Z","database_specific":{"unresolved_ranges":[{"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"},{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"30"},{"last_affected":"30"},{"introduced":"31"},{"last_affected":"31"}],"source":"CPE_STRING","vendor_product":"fedoraproject:fedora"}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OMG3BMUHGWTAPYTK2NXM6CXF6FYLOUO/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QBAOLXETM5BOYQG6OQVHGB2LNLZUXVN6/"},{"type":"ADVISORY","url":"https://seclists.org/bugtraq/2019/Oct/32"},{"type":"ADVISORY","url":"https://www.debian.org/security/2019/dsa-4545"},{"type":"FIX","url":"https://phabricator.wikimedia.org/T230402"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/wikimedia/mediawiki","events":[{"introduced":"5cfc9accca2cc2fb94060c309d562913b7bed57c"},{"fixed":"171d96bc6243f06cccbbed88b27c1cad082b90d6"},{"introduced":"0fbb878ef366477535a709b0c2564bdcf4b176d1"},{"fixed":"b6aaa25ce9595e3037f583a9f4100c962a594f3c"},{"introduced":"a1742c4f4b2c331a44ba1d80bf1431ddfb9ef678"},{"fixed":"573f48150317f0153d90542d139621460a7638a5"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.31.0"},{"fixed":"1.31.4"},{"introduced":"1.32.0"},{"fixed":"1.32.4"},{"introduced":"1.33.0"},{"fixed":"1.33.1"}]}}],"versions":["1.33.0","1.32.3","1.31.3","1.32.2","1.31.2","1.32.1","1.32.0","1.31.1","1.31.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-16738.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}