Description
MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2013-5776 Vulnerability (CVE-2013-5776)
Oracle Application Server Other Vulnerability (CVE-2002-1858)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2017-5645)
Oracle Database Server CVE-2008-1813 Vulnerability (CVE-2008-1813)
WordPress Plugin WP Survey And Quiz Tool 'action' Parameter Cross-Site Scripting (1.2.1)