An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
References
| Link | Resource |
|---|---|
| https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 | Issue Tracking Vendor Advisory |
| https://phabricator.wikimedia.org/T345064 | Issue Tracking Permissions Required |
| https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 | Issue Tracking Vendor Advisory |
| https://phabricator.wikimedia.org/T345064 | Issue Tracking Permissions Required |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 - Issue Tracking, Vendor Advisory | |
| References | () https://phabricator.wikimedia.org/T345064 - Issue Tracking, Permissions Required |
19 Sep 2024, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-693 |
12 Oct 2023, 16:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mediawiki:mediawiki:1.40.0:-:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 - Issue Tracking, Vendor Advisory | |
| References | (MISC) https://phabricator.wikimedia.org/T345064 - Issue Tracking, Permissions Required | |
| First Time |
Mediawiki
Mediawiki mediawiki |
09 Oct 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-09 06:15
Updated : 2024-11-21 08:26
NVD link : CVE-2023-45372
Mitre link : CVE-2023-45372
CVE.ORG link : CVE-2023-45372
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE