Unscored CVE-2022-29904 EUVD-2022-34214GHSA-j3c3-76w9-jg8q

The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with ce…

Published Apr 29, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain '-' and '_' constraints.

References

https://phabricator.wikimedia.org/T306463
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/SemanticDrilldown/+/785213