Description
In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.
Advisories 1
- WID-SEC-2023-0092 MediaWiki: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 19, 2023