Information disclosure

2023-10-0906:15:00

PRIOn knowledge base

www.prio-n.com

wikibase

mediawiki

issue

rate limit

merging items

7.6 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging items.

CPENameOperatorVersion
mediawikieq1.40.0
mediawikilt1.35.12
mediawikige1.36.0
mediawikilt1.39.5

Name	Operator	Version
mediawiki	eq	1.40.0
mediawiki	lt	1.35.12
mediawiki	ge	1.36.0
mediawiki	lt	1.39.5

References

gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264

phabricator.wikimedia.org/T345064