MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3)
published July 10, 2019
CVSS
—
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is
MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01263 · 69.5th percentile
Published
2019-07-10T14:45Z
EPSS history
Timeline
10 JUL 14:45Z
MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3)