Lucene search
GoogleOSV:CVE-2022-47927HistoryJan 12, 2023 - 6:15 a.m.
CVE-2022-47927
2023-01-1206:15:08
Google
osv.dev
5
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files include credentials data.
References
lists.debian.org/debian-lts-announce/2023/07/msg00011.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/
lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/thread/UEMW64LVEH3BEXCJV43CVS6XPYURKWU3/
phabricator.wikimedia.org/T322637
security.gentoo.org/glsa/202305-24
Related
cnvd
cnvd
MediaWiki has an unspecified vulnerability (CNVD-2023-06083)
2023-01-12 00:00:00
debiancve
debiancve
CVE-2022-47927
2023-01-12 06:15:00
cve
cve
CVE-2022-47927
2023-01-12 06:15:00
osv
osv
BIT-mediawiki-2022-47927
2024-03-06 11:03:27
mediawiki - security update
2023-07-10 00:00:00
nessus
nessus
Debian DLA-3489-1 : mediawiki - LTS security update
2023-07-11 00:00:00
Fedora 37 : mediawiki (2023-30a7a812f0)
2023-01-27 00:00:00
GLSA-202305-24 : MediaWiki: Multiple Vulnerabilities
2023-05-21 00:00:00
prion
prion
Code injection
2023-01-12 06:15:00
cvelist
cvelist
CVE-2022-47927
2023-01-12 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3489-1)
2023-07-11 00:00:00
veracode
veracode
Information Disclosure
2022-12-29 14:51:17
redhatcve
redhatcve
CVE-2022-47927
2023-01-13 06:05:04
debian
debian
[SECURITY] [DLA 3489-1] mediawiki security update
2023-07-10 20:46:05
ubuntucve
ubuntucve
CVE-2022-47927
2023-01-12 00:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerability
2023-06-28 08:21:41
fedora
fedora
[SECURITY] Fedora 37 Update: mediawiki-1.38.5-1.fc37
2023-01-27 08:58:39
gentoo
gentoo
MediaWiki: Multiple Vulnerabilities
2023-05-21 00:00:00