CVE-2022-29906

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...

CVE-2022-29906

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...

CVE-2022-29906

CVE-2022-29906 affects the QuizGame extension admin API of MediaWiki up to 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66). The vulnerability arises because the admin API omits a check for the quizadmin user, enabling unauthorized access through the admin API. Connected Red Hat and OSV/p...