Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.
References
| Link | Resource |
|---|---|
| https://gerrit.wikimedia.org/r/q/I7ed0049691258c8bd2555e599b9b88490fbe3358 | Patch |
| https://phabricator.wikimedia.org/T410560 | Issue Tracking |
Configurations
Configuration 1 (hide)
|
History
10 Feb 2026, 20:20
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Wikimedia
Wikimedia campaignevents |
|
| CPE | cpe:2.3:a:wikimedia:campaignevents:1.45:*:*:*:*:mediawiki:*:* cpe:2.3:a:wikimedia:campaignevents:1.44:*:*:*:*:mediawiki:*:* cpe:2.3:a:wikimedia:campaignevents:1.39:*:*:*:*:mediawiki:*:* cpe:2.3:a:wikimedia:campaignevents:1.43:*:*:*:*:mediawiki:*:* |
|
| References | () https://gerrit.wikimedia.org/r/q/I7ed0049691258c8bd2555e599b9b88490fbe3358 - Patch | |
| References | () https://phabricator.wikimedia.org/T410560 - Issue Tracking |
09 Jan 2026, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
09 Jan 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-09 16:16
Updated : 2026-02-10 20:20
NVD link : CVE-2026-0817
Mitre link : CVE-2026-0817
CVE.ORG link : CVE-2026-0817
JSON object : View
Products Affected
wikimedia
- campaignevents
CWE
CWE-862
Missing Authorization