Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it.

Remediation

References

CVE-2017-0369

Related Vulnerabilities

WordPress Plugin Manage Calameo Publications by Athlon Cross-Site Scripting (1.1.0)

WordPress Plugin Menu Image Malware/Addware Notification (2.6.9)

jPlayer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2023)

WordPress Plugin Reusable Blocks Extended Cross-Site Request Forgery (0.9)

PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0065)

Severity

Medium

Classification

CVE-2017-0369 CWE-276 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities