GHSA-mhfv-9h99-jwg7MediumCVSS 4.3

Mediawiki Improper Privilege Management

Published
May 13, 2022
Last Modified
May 15, 2024

🔗 CVE IDs covered (1)

CVE-2018-0503 →

📋 Description

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.

🎯 Affected products4

  • composer/mediawiki/core:>= 1.27.0, < 1.27.5
  • composer/mediawiki/core:>= 1.29.0, < 1.29.3
  • composer/mediawiki/core:>= 1.30.0, < 1.30.1
  • composer/mediawiki/core:>= 1.31.0, < 1.31.1

🔗 References (10)