Description
An issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof permission in the AntiSpoof extension is incorrect.
Remediation
References
Related Vulnerabilities
Drupal Core 5.x Cross-Site Request Forgery (5.0 - 5.2)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2043)
Jenkins Improper Authentication Vulnerability (CVE-2018-1999045)
Oracle JRE CVE-2014-2409 Vulnerability (CVE-2014-2409)
PostgreSQL Improper Authentication Vulnerability (CVE-2009-3231)