Maniphest T31856

Email notification to old address when verified email address is changed or removed
Closed, ResolvedPublic
Actions

Description

If a verified email address is changed or removed, an email notification should be sent to the old address. The email is for informational purposes only, it should not contain any verification codes. The main purpose of this is a reasonable defense against account cracking.

Discussion on en.wp: [[Wikipedia:Village pump (proposals)/Account security#Notify of removal of verified email address]]

Version: unspecified
Severity: enhancement

Details

Reference: bz29856

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	SECURITY: fix IP leak to unverified email	mediawiki/core	master	+2 -2
	SECURITY: fix IP leak to unverified email	mediawiki/core	REL1_42	+2 -2
	SECURITY: fix IP leak to unverified email	mediawiki/core	REL1_43	+2 -2
	SECURITY: fix IP leak to unverified email	mediawiki/core	REL1_44	+2 -2
	SECURITY: fix IP leak to unverified email	mediawiki/core	REL1_39	+2 -2
	User.php: Update 'setEmailWithConfirmation' for notification email	mediawiki/core	master	+32 -2

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Galorefitz	T31856 Email notification to old address when verified email address is changed or removed
		Resolved		kostajh	T34281 MediaWiki needs a sane notification system (tracking)
		Open		None	T34284 Update Echo Notifications in real time without page reloads
		Resolved		None	T34283 API method to poll centralized notifications
		Open		None	T113125 Investigate using service workers to provide real-time Echo notifications in the browser (push notifications)
		Resolved		Shivanshbindal9	T219222 Make notification counts update without page reload
		Resolved		Shivanshbindal9	T225259 Visual Cue to indicate change in notification count
		Open		None	T226127 Change the color of Alert/Message indicator.
		Resolved		Shivanshbindal9	T226130 Display notification text for incoming notification
		Resolved		Shivanshbindal9	T227501 Change polling rate when document not visible
		Resolved		Shivanshbindal9	T229732 Define preference for poll updates
		Open		None	T231697 Notifications auto-updater should be able to get the updates with one API call, not two
		Resolved		None	T34285 Email backend for notifications to supplement/consolidate enotif with common notification infrastructure
		Duplicate		None	T34288 Android cloud to device messaging backend for user notification system
		Resolved		• JMinor	T34287 Apple iOS push notification backend for user notification system
		Open	BUG REPORT	None	T41513 LQT notification email (enotif) are sent for replies/new threads on watchlisted pages/threads regardless of users' enotif settings
		Resolved		matmarex	T128351 Notifications should be in core

Event Timeline

• bzimport raised the priority of this task from to Low.Nov 21 2014, 11:27 PM

• bzimport added a project: MediaWiki-Email.

• bzimport set Reference to bz29856.

• bzimport added a subscriber: Unknown Object (MLST).

MER-C created this task.Jul 13 2011, 3:34 AM

• werdna unsubscribed.Dec 10 2014, 6:16 PM

MGChecker subscribed.Jan 14 2016, 3:24 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 14 2016, 3:24 PM

Devirk claimed this task.Jan 14 2016, 5:53 PM

Devirk set Security to None.

Haritha28 subscribed.Jan 14 2016, 5:54 PM

Haritha28 unsubscribed.

Devirk removed Devirk as the assignee of this task.Mar 10 2016, 6:09 AM

Devirk subscribed.

01tonythomas mentioned this in T15303: Implement HTML e-mail support in MediaWiki.Mar 10 2016, 6:11 AM

Galorefitz subscribed.Mar 10 2016, 6:20 AM

Galorefitz claimed this task.Mar 10 2016, 2:16 PM

Change 276563 had a related patch set uploaded (by Galorefitz):
User.php: Update 'setEmailWithConfirmation' for notification email

https://gerrit.wikimedia.org/r/276563

gerritbot added a project: Patch-For-Review.Mar 10 2016, 9:08 PM

@01tonythomas and @Parent5446 could you please review the submitted patch?

Galorefitz mentioned this in T130490: GSoC/Outreachy proposal for Implementing HTML E-Mail support in MediaWiki.Mar 20 2016, 11:08 AM

Change 276563 merged by jenkins-bot:
User.php: Update 'setEmailWithConfirmation' for notification email

https://gerrit.wikimedia.org/r/276563

Parent5446 closed this task as Resolved.Apr 10 2016, 5:32 AM

ReleaseTaggerBot added projects: MW-1.27-release-notes, MW-1.27-release (WMF-deploy-2016-04-12_(1.27.0-wmf.21)).Apr 10 2016, 6:00 AM

kostajh closed subtask T34281: MediaWiki needs a sane notification system (tracking) as Resolved.Feb 17 2020, 8:47 AM

Michael mentioned this in T396230: CVE-2025-6593: "{{SITENAME}} registered email address has been changed" email sent to unverified email addresses.Jun 6 2025, 3:06 PM

Maintenance_bot removed a project: Patch-For-Review.Jun 6 2025, 3:32 PM

Change #1165073 had a related patch set uploaded (by Reedy; author: Michael Große):

[mediawiki/core@REL1_43] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165073

gerritbot added a project: Patch-For-Review.Jun 30 2025, 6:04 PM

Change #1165086 had a related patch set uploaded (by Reedy; author: Michael Große):

[mediawiki/core@REL1_39] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165086

Change #1165099 had a related patch set uploaded (by Reedy; author: Michael Große):

[mediawiki/core@REL1_44] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165099

Change #1165086 merged by jenkins-bot:

[mediawiki/core@REL1_39] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165086

ReleaseTaggerBot added a project: MW-1.39-notes.Jun 30 2025, 7:01 PM

Change #1165114 had a related patch set uploaded (by Reedy; author: Michael Große):

[mediawiki/core@master] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165114

Change #1165133 had a related patch set uploaded (by Reedy; author: Michael Große):

[mediawiki/core@REL1_42] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165133

Change #1165099 merged by jenkins-bot:

[mediawiki/core@REL1_44] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165099

MER-C unsubscribed.Jun 30 2025, 7:33 PM

Change #1165073 merged by jenkins-bot:

[mediawiki/core@REL1_43] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165073

Change #1165114 merged by jenkins-bot:

[mediawiki/core@master] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165114

ReleaseTaggerBot added projects: MW-1.45-notes (1.45.0-wmf.8; 2025-07-01), MW-1.44-notes, MW-1.43-notes.Jun 30 2025, 8:02 PM

Change #1165133 merged by jenkins-bot:

[mediawiki/core@REL1_42] SECURITY: fix IP leak to unverified email

https://gerrit.wikimedia.org/r/1165133

Maintenance_bot removed a project: Patch-For-Review.Jun 30 2025, 8:31 PM

ReleaseTaggerBot added a project: MW-1.42-notes.Jun 30 2025, 9:00 PM