CVE-2019-12472

An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1

published July 10, 2019

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01325 · 70.7th percentile
Published
2019-07-10T15:55Z
EPSS history
Timeline
  • 10 JUL 15:55Z
    An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1
    cvelistv5