Description (CNA)
Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Wikimedia Foundation / Mediawiki - Lockdown Extension | affected master before 1.42 |
CWE
CWE-732
References
- https://phabricator.wikimedia.org/T397521
- https://gerrit.wikimedia.org/r/q/Id275382743957004fa7fc56318fc104d8e2d267b
ADP enrichment
No English description supplied.