CVE-2022-29906

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...

MediaWiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.37.2 and earlier versions, which stems fro...

PT-2022-19905 · Mediawiki +1 · Mediawiki Quiz Extension +1

Name of the Vulnerable Software and Affected Versions: MediaWiki QuizGame extension versions through 1.37.2 Description: The admin API module in the QuizGame extension for MediaWiki omits a check for the quizadmin user. Recommendations: For MediaWiki QuizGame extension versions through 1.37.2,...

CVE-2022-29906: Missing Authorization

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...