Unrated

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check for the qu...

CVE-2022-29906 First seen on SecPulse Apr 29, 2022

Original description The description as published by the source.

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check for the quizadmin user.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web gerrit.wikimedia.org
web phabricator.wikimedia.org

Key facts

Severity: Unrated
Published: Apr 29, 2022
First seen on SecPulse: Apr 29, 2022

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:00