CVE-2016-6336
MEDIUM6.5EPSS 0.10%Published: 4/20/2017Modified: 4/28/2026
Also known as:DEBIAN-CVE-2016-6336
Description
MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by using Special:Undelete.
Affected packages (1)
- Debian/mediawikifrom 0, < 1:1.27.1-1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.5 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |