CVEvulnerability
CVE-2023-45372
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-693
Description
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
Affected configurations
• mediawiki mediawiki (< 1.35.12)
• mediawiki mediawiki (>= 1.36.0 < 1.39.5)
• mediawiki mediawiki 1.40.0
Related
Weakness · CWE (1)
- CWE-693 Protection Mechanism Failure weakness
References
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 Issue Tracking, Vendor Advisory
- https://phabricator.wikimedia.org/T345064 Issue Tracking, Permissions Required
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 Issue Tracking, Vendor Advisory
- https://phabricator.wikimedia.org/T345064 Issue Tracking, Permissions Required