Iluvatar

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.32.2 MediaWiki versions prior to 1.31.2 MediaWiki versions prior to 1.30.2 MediaWiki versions prior to 1.27.6 **Description** The issue is related to insufficient access control in the Special:ChangeEmail function of MediaWiki, allowing an attacker to replace the sender's email address. This can be exploited by a remote attacker to impact data integrity. A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. **Recommendations** For MediaWiki versions prior to 1.32.2, update to version 1.32.2 or later. For MediaWiki versions prior to 1.31.2, update to version 1.31.2 or later. For MediaWiki versions prior to 1.30.2, update to version 1.30.2 or later. For MediaWiki versions prior to 1.27.6, update to version 1.27.6 or later.