Unrated

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigge...

CVE-2022-28201 First seen on SecPulse Sep 19, 2022

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-28201 mediawiki Fixed in: 1:1.35.8-1~deb11u1
Ubuntu UBUNTU-CVE-2022-28201 mediawiki

Original description The description as published by the source.

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory debian.org
web phabricator.wikimedia.org
web blog.legoktm.com
web lists.debian.org

Key facts

Severity: Unrated
Published: Sep 19, 2022
First seen on SecPulse: Sep 19, 2022

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:56