Description
An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the intended interaction with AbuseFilter does not occur.
Remediation
References
Related Vulnerabilities
OpenSSL Other Vulnerability (CVE-2005-2969)
Joomla! Core 3.x.x Information Disclosure (3.6.0 - 3.9.12)
Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2018-16476)
Atlassian Confluence CVE-2023-22515 Vulnerability (CVE-2023-22515)
WordPress Plugin Two Factor Authentication Cross-Site Request Forgery (1.3.12)