CVE-2018-0503 $wgRateLimits entry for 'user' overrides 'newbie'

2018-09-2000:00:00

debian

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.6%

JSON

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for ‘user’ overrides that for ‘newbie’.

CNA Affected

[
  {
    "product": "mediawiki",
    "vendor": "mediawiki",
    "versions": [
      {
        "status": "affected",
        "version": "before 1.31.1, 1.30.1, 1.29.3 and 1.27.5"
      }
    ]
  }
]