Unrated
An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,
CVE-2022-28323
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web gerrit.wikimedia.org
- web gerrit.wikimedia.org
- web phabricator.wikimedia.org