Mediawiki Abuse-Filter vulnerabilities

1 known vulnerability affecting mediawiki/abuse-filter.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-47913MEDIUM≥ 0, < 1.39.9≥ 1.40.0, < 1.41.3+1 more2024-10-05

CVE-2024-47913 [MEDIUM] CWE-532 Improper permissions handling in MediaWiki AbuseFilter Improper permissions handling in MediaWiki AbuseFilter An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. An API caller can match a filter condition against AbuseFilter logs even if the caller is not authorized to view the log details for the filter.

Mediawiki Abuse-Filter vulnerabilities | cvebase