An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
References
| Link | Resource |
|---|---|
| https://phabricator.wikimedia.org/T345064 | Issue Tracking Permissions Required |
| https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Oct 2023, 16:04
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-09 06:15
Updated : 2024-09-19 18:35
NVD link : CVE-2023-45372
Mitre link : CVE-2023-45372
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE