{
  "id": "CVE-2021-30153",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2023-04-15T20:16:00.570",
  "lastModified": "2023-04-17T13:12:43.170",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35.2. . When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden, user, VisualEditor will disclose that the user exists. (It shouldn't because they are hidden.) This is related to ApiVisualEditor."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/message/XYBF5RSTJRMVCP7QBYK7643W75A3KCIY/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lists.wikimedia.org/pipermail/wikitech-l/2021-April/094418.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://phabricator.wikimedia.org/T270453",
      "source": "cve@mitre.org"
    }
  ]
}