PT-2022-16893

CVE-2022-24813

Published

2022-04-04

Updated

2023-06-23

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions CreateWiki (affected versions not specified)

Description CreateWiki is Miraheze's MediaWiki extension for requesting and creating wikis. Without the patch for this issue, anonymous comments can be made using Special:RequestWikiQueue when sent directly via POST. A patch for this issue is available in the master branch of CreateWiki's GitHub repository.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Rhinosf1

Vendors

Affected products

Weakness enumeration

CWE-288: Authentication Bypass Using an Alternate Path or Channel

CWE-287: Improper Authentication

Related identifiers