Description
In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled.
Remediation
References
Related Vulnerabilities
WordPress 6.1.x Cross-Site Scripting (6.1 - 6.1.5)
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37148)
WordPress Possible SQL Injection Vulnerability (0.70 - 3.6.1)
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7950)
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.1.44)