PT-2026-99122 · Mediawiki · Translate Extension

Siebrand

·

CVE-2026-100378

·

Published

2026-09-25

·

Updated

2026-09-28

CVSS v4.0

5.3

Medium

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions Mediawiki - Translate Extension versions prior to 1.46.1 Mediawiki - Translate Extension version 1.45.5 Mediawiki - Translate Extension version 1.43.10
Description An authorization flaw exists where functionality is not properly constrained by Access Control Lists (ACLs), which are sets of rules that define which users or systems are granted access to specific objects. This allows unauthorized access to certain features within the extension.
Recommendations Update Mediawiki - Translate Extension to a version newer than 1.46.1. Update Mediawiki - Translate Extension to a version newer than 1.45.5. Update Mediawiki - Translate Extension to a version newer than 1.43.10.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-100378

Affected Products

Translate Extension