CVE-2019-19709

MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable…

published December 11, 2019

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01564 · 75.1th percentile
Published
2019-12-11T01:33Z
EPSS history
Timeline
  • 11 DEC 01:33Z
    MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable…
    cvelistv5