Spoofing attack in MediaWiki - #VU81438
Published: October 3, 2023
Vulnerability identifier: #VU81438
CSH Severity: Low
CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-451
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to perform spoofing attack.
The vulnerability exists due to incorrect processing of permissions, which leads to users with incorrect permissions to be incorrectly displayed.
Affected software
MediaWiki
Remediation
Install updates from vendor's website.
MediaWiki - addressed in versions 1.39.5, 1.40.1