Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-100378 EUVD-2026-87361GHSA-w84h-xpwq-m99w

Missing permission check in the Translate sandbox doRemind action

Published Sep 25, 2026 · Updated Sep 26, 2026 · Assigned by wikimedia-foundation

Description

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Mediawiki - Translate Extension: from * before 1.46.1, 1.45.5, 1.43.10.

Affected products

VendorProductAffectedFixed
Wikimedia Foundation Mediawiki - Translate Extension < 1.46.1, 1.45.5, 1.43.10 1.46.1, 1.45.5, 1.43.10

Advisories 1

References