Description

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).

Remediation

References

CVE-2023-45372

Related Vulnerabilities

Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)

MySQL Other Vulnerability (CVE-2006-1516)

WordPress Plugin Awesome Support-WordPress HelpDesk & Support Cross-Site Scripting (5.8.0)

SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-1024)

MySQL CVE-2022-21303 Vulnerability (CVE-2022-21303)

Severity

Medium

Classification

CVE-2023-45372 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities