CVE-2022-29547

Name of the Vulnerable Software and Affected Versions MediaWiki CreateRedirect extension versions prior to 2022-04-14

Description The issue concerns the CreateRedirect extension for MediaWiki, where it fails to properly check user permissions for editing the target page. This could allow unauthorized or blocked users to edit pages they should not have access to.

Recommendations For MediaWiki CreateRedirect extension versions prior to 2022-04-14, update to a version released after 2022-04-14 to resolve the issue. As a temporary workaround, consider restricting access to the extension's functionality to minimize the risk of exploitation.