Unrated
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are...
CVE-2022-41767
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-41767 mediawiki Fixed in: 1:1.35.8-1~deb11u1
- Ubuntu UBUNTU-CVE-2022-41767 mediawiki
Original description The description as published by the source.
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned to a user (using reassignEdits.php), the changes will still be attributed to the IP address on Special:Contributions when doing a range lookup.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- web phabricator.wikimedia.org