Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it.

Remediation

References

CVE-2017-0369

Related Vulnerabilities

WordPress Plugin Login with phone number Cross-Site Scripting (1.4.1)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21030)

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-21016)

Ruby on Rails CVE-2018-16477 Vulnerability (CVE-2018-16477)

WordPress Plugin Media Library Assistant Multiple Vulnerabilities (2.65)

Severity

Medium

Classification

CVE-2017-0369 CWE-276 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities