Gentoo Linux: CVE-2022-47927: MediaWiki: Multiple Vulnerabilities

Gentoo Linux: CVE-2022-47927: MediaWiki: Multiple Vulnerabilities

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:C/I:N/A:N)

Published

01/12/2023

Created

05/23/2023

Added

05/23/2023

Modified

01/28/2025

Description

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files include credentials data.

Solution(s)

• gentoo-linux-upgrade-www-apps-mediawiki

References

• https://attackerkb.com/topics/cve-2022-47927
• CVE - 2022-47927
• 202305-24