Description
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging items.
Remediation
References
Related Vulnerabilities
WordPress Plugin Newsletter-Send awesome emails from WordPress Open Redirect (2.6.4.4)
Drupal Other Vulnerability (CVE-2005-3975)
Oracle HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-25315)
WordPress Plugin Contact Form 7 Style Cross-Site Request Forgery (3.2)
PHP-Fusion Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1807)