Exposed suppressed username via Special:Redirect

PKSA-2hm2-kzrp-dy4t CVE-2019-16738

Affected package: mediawiki/core

Affected version: >=1.31.0,<1.31.4|>=1.32.0,<1.32.4|>=1.33.0,<1.33.1

Reported by:
FriendsOfPHP/security-advisories