← Database

CVE-2022-29904

CRITICAL CVSS: 9.8 Published: 2022-04-29 Modified: 2026-06-17

Description

The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain '-' and '_' constraints.

Affected Platforms

Mediawiki Mediawiki

Weakness Type

CWE-89

References