GHSA-5c6w-f4w2-2grpMediumCVSS 6.5

Mediawiki BotPassword can bypass CentralAuth's account lock

Published
May 13, 2022
Last Modified
May 15, 2024

🔗 CVE IDs covered (1)

CVE-2018-0505 →

📋 Description

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock

🎯 Affected products4

  • composer/mediawiki/core:>= 1.27.0, < 1.27.5
  • composer/mediawiki/core:>= 1.29.0, < 1.29.3
  • composer/mediawiki/core:>= 1.30.0, < 1.30.1
  • composer/mediawiki/core:>= 1.31.0, < 1.31.1

🔗 References (10)