CVE-2020-10534: Critical severity mediawiki vulnerability
In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-10534?
CVE-2020-10534 has a high severity rating due to the potential for blocked users to regain escalated privileges.
How do I fix CVE-2020-10534?
You can fix CVE-2020-10534 by updating your MediaWiki installation to version 1.34.1 or later.
What versions of MediaWiki are affected by CVE-2020-10534?
MediaWiki versions up to and including 1.34.0 are affected by CVE-2020-10534.
What type of vulnerability is CVE-2020-10534?
CVE-2020-10534 is a privilege escalation vulnerability related to IP range evaluation.
Can CVE-2020-10534 affect users' security?
Yes, CVE-2020-10534 can compromise user security by allowing unauthorized access to blocked users.