CVE-2015-8007: Echo Project Echo

Medium severity, CVSS 4.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification.

Affected products

• Echo Project Echo: any version

Published 2015-11-09. Last modified 2026-06-17.