Описание
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | not-affected | 1:1.31.1-2 |
| devel | not-affected | 1:1.31.1-2 |
| disco | not-affected | 1:1.31.1-2 |
| eoan | not-affected | 1:1.31.1-2 |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 1:1.31.1-2 |
| esm-apps/jammy | not-affected | 1:1.31.1-2 |
| esm-apps/noble | not-affected | 1:1.31.1-2 |
| esm-apps/resolute | not-affected | 1:1.31.1-2 |
Показывать по
EPSS
4 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a fla ...
Mediawiki BotPassword can bypass CentralAuth's account lock
Уязвимость программного средства для реализации гипертекстовой среды MediaWiki, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти блокировку учетной записи CentralAuth
EPSS
4 Medium
CVSS2
6.5 Medium
CVSS3