Описание
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
Ссылки
- Issue TrackingVendor Advisory
- Issue TrackingPermissions Required
- Issue TrackingVendor Advisory
- Issue TrackingPermissions Required
Уязвимые конфигурации
Одно из
EPSS
5.3 Medium
CVSS3
Дефекты
Связанные уязвимости
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
Уязвимость расширения Wikibase программного средства для реализации гипертекстовой среды MediaWiki, позволяющая нарушителю оказать воздействие на целостность данных
ALT-PU-2023-6419: package `mediawiki` update to version 1.40.1-alt1
ALT-PU-2024-1228: package `mediawiki` update to version 1.40.1-alt2
EPSS
5.3 Medium
CVSS3