Unrated

An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the int...

CVE-2023-37301 First seen on SecPulse Jun 30, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2023-37301 mediawiki

Original description The description as published by the source.

An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the intended interaction with AbuseFilter does not occur.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web gerrit.wikimedia.org
web phabricator.wikimedia.org

Key facts

Severity: Unrated
Published: Jun 30, 2023
First seen on SecPulse: Jun 30, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:58