CVE-2022-28206

Description

An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles the check for edit rights.

Affected packages (1)

• Bitnami/mediawikifrom 0, < 1.37.2

CVSS scores

References (4)

• WEBhttps://gerrit.wikimedia.org/r/q/I84be9cd3639b8ab0e037a4ec2d3f2f478f0989c5
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2022-28206
• WEBhttps://phabricator.wikimedia.org/T294256
• WEBhttps://security.gentoo.org/glsa/202305-24