Description
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks for certain automatically created MediaWiki user accounts, thus allowing nefarious users to remain unblocked.
Remediation
References
Related Vulnerabilities
Atlassian Jira Missing Authorization Vulnerability (CVE-2019-3399)
WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.2.0)
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2020-11080)
PHP Other Vulnerability (CVE-2006-1990)
WordPress Plugin Navis DocumentCloud Cross-Site Scripting (0.1)