Unrated

The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain '-' a...

CVE-2022-29904 First seen on SecPulse Apr 29, 2022

Original description The description as published by the source.

The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain '-' and '_' constraints.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web gerrit.wikimedia.org
web phabricator.wikimedia.org

Key facts

Severity: Unrated
Published: Apr 29, 2022
First seen on SecPulse: Apr 29, 2022

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:00