CVE-2023-29137 (published 2023-03-31T00:00:00)
An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a