← Database

CVE-2023-22945

MEDIUM CVSS: 4.3 Published: 2023-01-11 Modified: 2026-06-17

Description

In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.

Affected Platforms

Mediawiki MediawikiFedoraproject Fedora

Weakness Type

CWE-863, CWE-863

References