First published: Thu Apr 21 2022(Updated: )
The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mediawiki Createredirect | <2022-04-14 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.