MediaWiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.37.1, which stems from...

PT-2022-18876 · Unknown +2 · Antispoof Extension +2

Name of the Vulnerable Software and Affected Versions: Mediawiki versions through 1.37.1 Description: An issue was discovered in the AntiSpoof extension where the check for the override-antispoof permission is incorrect. Recommendations: For versions through 1.37.1, as a temporary workaround,...