CVE-2022-39194

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.38.2 and earlier

Description An issue was discovered in the community configuration pages for the GrowthExperiments extension, which could cause a site to become unavailable due to insufficient validation when certain actions, including page moves, were performed.

Recommendations For MediaWiki versions 1.38.2 and earlier, consider disabling the GrowthExperiments extension until a patch is available. Restrict access to the community configuration pages to minimize the risk of exploitation. Avoid performing certain actions, such as page moves, on these pages until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.