Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | mediawiki | 1:1.31.6-1~deb10u1 |
| Debian · 9 | mediawiki | 1:1.27.7-1~deb9u3 |
Vulnerabilities 1
-
Medium 6.1
Possible to circumvent title-blacklist
MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.