Description

An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future.

Remediation

References

CVE-2022-28205

Related Vulnerabilities

PostgreSQL Other Vulnerability (CVE-2002-1402)

WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.9)

TCExam Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-4601)

ownCloud Improper Authentication Vulnerability (CVE-2020-10254)

WordPress Plugin Easy Registration Forms Cross-Site Scripting (1.8.3)

Severity

Critical

Classification

CVE-2022-28205 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities