CVE-2020-15164

CVE-2020-15164 describes a critical authentication bypass vulnerability in the Scratch Login MediaWiki extension, affecting all versions prior to 1.1. An attacker could gain unauthorized access to any user account by manipulating usernames with leading, trailing, or repeated underscores, which MediaWiki incorrectly trimmed as whitespace. This vulnerability carries a CVSS score of 10.0 (CRITICAL) due to its network-based attack vector, low complexity, and high impact on confidentiality and integrity, allowing complete account compromise. Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit tools or significant community discussion surrounding this CVE.