CVE-2019-16738: Debian Linux

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 30 only; version 31 only
• Mediawiki Mediawiki: from 1.31.0, before 1.31.4 (fixed in 1.31.4); from 1.32.0, before 1.32.4 (fixed in 1.32.4); from 1.33.0, before 1.33.1 (fixed in 1.33.1)

Published 2019-09-26. Last modified 2026-06-17.