3 matches found
CVE-2020-5302
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
PT-2020-18391
Name of the Vulnerable Software and Affected Versions MH-WikiBot affected versions not specified Description The issue allowed unprivileged users to access steward commands on the IRC interface by impersonating the nickname of a privileged user, as no login check was performed. Recommendations At...
CVE-2020-5302: Improper Access Control
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...