This vulnerability (CWE-200) in MediaWiki involves exposure of sensitive information to unauthorized actors due to an issue in includes/Parser/Parser.Php. It affects multiple versions of MediaWiki before 1.43.9, 1.44.6, 1.45.4, and 1.46.0. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and no confidentiality, integrity, or availability impact metrics set, resulting in a medium severity rating. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The vulnerability allows unauthorized actors to access sensitive information within affected MediaWiki installations. The exact nature or scope of the sensitive information exposed is not detailed. There are no reported active exploits in the wild. The impact is classified as medium severity based on the CVSS vector and CWE classification.

Patch status is not yet confirmed — check the Wikimedia Foundation vendor advisory for current remediation guidance. Until an official fix is released, administrators should monitor for updates from the vendor. No specific temporary mitigations are provided in the available data.