Unscored CVE-2023-45371 EUVD-2023-49663GHSA-7g5q-3gqm-27gq

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40…

Published Oct 9, 2023 · Updated Sep 19, 2024 · Assigned by mitre

Description

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging items.

Advisories 1

WID-SEC-2023-2594 MediaWiki: Mehre Schwachstellen BSI CERT-Bund (WID) · Nov 28, 2023

References

https://phabricator.wikimedia.org/T345064
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264