A vulnerability was found in MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup. Reference: https://phabricator.wikimedia.org/T230402
Created mediawiki tracking bugs for this issue: Affects: fedora-all [bug 1755763]