CVE-2023-45372

CVE-2023-45372 affects the Wikibase extension for MediaWiki. During item merging, ItemMergeInteractor runs without an edit filter (e.g., AbuseFilter), enabling potential unfiltered edits. Affected versions: MediaWiki Wikibase extension before 1.35.12; 1.36.x through 1.39.x before 1.39.5; and 1.40...

CVE-2023-45372

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running e.g., AbuseFilter...