Unscored CVE-2023-45372 EUVD-2023-49664GHSA-2r79-m38c-p4mw

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40…

Published Oct 9, 2023 · Updated Sep 19, 2024 · Assigned by mitre

Description

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).

Advisories 1

WID-SEC-2023-2594 MediaWiki: Mehre Schwachstellen BSI CERT-Bund (WID) · Nov 28, 2023

References

https://phabricator.wikimedia.org/T345064
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264