Description

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging items.

Remediation

References

CVE-2023-45371

Related Vulnerabilities

Undertow Incorrect Authorization Vulnerability (CVE-2017-12196)

WordPress Plugin G Auto-Hyperlink SQL Injection (1.0.1)

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-35197)

WordPress Plugin Gmedia Photo Gallery Multiple Cross-Site Scripting Vulnerabilities (1.18.4)

Joomla! Core 3.x.x Security Bypass (3.0.0 - 3.2.4)

Severity

High

Classification

CVE-2023-45371 CWE-770 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities