Description
An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki API to "protect" a page, a user is currently able to protect to a higher level than they currently have permissions for.
Remediation
References
Related Vulnerabilities
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1501)
MySQL CVE-2020-14794 Vulnerability (CVE-2020-14794)
WordPress Plugin Easy PayPal Buy Now Button Cross-Site Scripting (1.7.3)
WordPress Plugin MediaPress Security Bypass (1.1.9)
PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-1899)