Unrated

In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to...

CVE-2023-22945 First seen on SecPulse Jan 11, 2023

Original description The description as published by the source.

In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory lists.fedoraproject.org
advisory nvd.nist.gov
web gerrit.wikimedia.org
web phabricator.wikimedia.org

Key facts

Severity: Unrated
Published: Jan 11, 2023
First seen on SecPulse: Jan 11, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:57