← Database

CVE-2022-29547

HIGH CVSS: 7.5 Published: 2022-04-21 Modified: 2026-06-17

Description

The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.

Affected Platforms

Mediawiki Createredirect

Weakness Type

CWE-276

References