CVE-2022-41767

MEDIUM

MediaWiki <1.35.8, 1.36.x, 1.37.x <1.37.5, 1.38.x <1.38.3 - Info Di...

Title source: llm
STIX 2.1

Description

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned to a user (using reassignEdits.php), the changes will still be attributed to the IP address on Special:Contributions when doing a range lookup.

References (2)

Core 2
Core References
Issue Tracking, Patch, Vendor Advisory
https://phabricator.wikimedia.org/T316304

Scores

CVSS v3 5.3
EPSS 0.0016
EPSS Percentile 36.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
mediawiki/mediawiki < 1.35.8
Published Dec 26, 2022
Tracked Since Feb 18, 2026