Design/Logic Flaw

2023-10-0906:15:00

PRIOn knowledge base

www.prio-n.com

wikibase

extension

item merging

edit filter

mediawiki

logic flaw

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).

CPENameOperatorVersion
mediawikieq1.40.0
mediawikilt1.35.12
mediawikige1.36.0
mediawikilt1.39.5

Name	Operator	Version
mediawiki	eq	1.40.0
mediawiki	lt	1.35.12
mediawiki	ge	1.36.0
mediawiki	lt	1.39.5

References

gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264

phabricator.wikimedia.org/T345064