跳转到帖子

MediaWiki: Unspecified Security Vulnerability (CVE-2023-29140)

recommended_posts

发布于
  • Members

MediaWiki: Unspecified Security Vulnerability (CVE-2023-29140)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
03/31/2023
Created
05/05/2023
Added
04/12/2023
Modified
01/28/2025

Description

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see edits for which the username has been hidden, because there is no check for rev_deleted.

Solution(s)

  • mediawiki-upgrade-latest

References

  • https://attackerkb.com/topics/cve-2023-29140
  • CVE - 2023-29140
  • https://phabricator.wikimedia.org/T327613
  • 查看数 695
  • 已创建
  • 最后回复