Description
In MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.
Remediation
References
Related Vulnerabilities
SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-1892)
Drupal Improper Authentication Vulnerability (CVE-2010-3686)
WordPress Plugin RBX Gallery 'uploader.php' Arbitrary File Upload (2.1)
PHP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-10546)
jQuery Validation Uncontrolled Resource Consumption Vulnerability (CVE-2021-21252)