Overview
- Description
- An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.3
- Impact score
- 1.4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Severity
- MEDIUM
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-693
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A920574-0C59-4036-9878-C5A39EF82AA1",
"versionEndExcluding": "1.35.12"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20B3C0EF-1980-4F24-B0C6-B4BA77562DA3",
"versionEndExcluding": "1.39.5",
"versionStartIncluding": "1.36.0"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.40.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "195C853F-2D51-44A4-990E-8E04FF4E9AA8"
}
],
"operator": "OR"
}
]
}
]