Description

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).

Remediation

References

CVE-2023-45372

Related Vulnerabilities

Django Incorrect Regular Expression Vulnerability (CVE-2018-7536)

WordPress Plugin BuddyDrive Cross-Site Scripting (1.2.2)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2931)

WordPress Plugin Elementor Addon Elements Cross-Site Request Forgery (1.6.3)

CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4903)

Severity

Medium

Classification

CVE-2023-45372 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities