← back
CVE-2022-29547

CVE-2022-29547

EPSS 0.9%
The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CreateRedirect/+/780567https://phabricator.miraheze.org/T9061https://phabricator.wikimedia.org/T306174