An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=mcrundo followed by action=mcrrestore to replace the content of any arbitrary page (that the user doesn't have edit rights for). This applies to any public wiki, or a private wiki that has at least one page set in $wgWhitelistRead.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-mediawiki | Nov 4, 2022 | Dec 17, 2021 | |
| Freebsd | freebsd-upgrade-package-mediawiki135freebsd-upgrade-package-mediawiki136freebsd-upgrade-package-mediawiki137 | Nov 4, 2022 | Dec 21, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-www-apps-mediawiki | May 23, 2023 | Dec 17, 2021 | |
| Mediawiki | mediawiki-upgrade-latest | Dec 23, 2021 | Dec 17, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub