VulnerabilityModified
CVE-2022-41767
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3.
MEDIUM 5.3EPSS 0.64%
Does this matter?
Lower severity and a low EPSS score (0.64%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned to a user (using reassignEdits.php), the changes will still be attributed to the IP address on Special:Contributions when doing a range lookup.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.64% probability · 49th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- mediawiki/mediawiki
- Source
- cve@mitre.org
References
- https://phabricator.wikimedia.org/T316304Issue Tracking, Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202305-24
- https://phabricator.wikimedia.org/T316304Issue Tracking, Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202305-24
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.