CVE-2022-23473CWE-863

Tuleap MediaWiki standalone "readers" can also edit pages

Medium · published December 13, 2022

CVSS v3.1
4.3
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.148, Authorizations are not properly verified when accessing MediaWiki standalone resources. Users with read only permissions for pages are able to also edit them. This only affects the MediaWiki standalone plugin. This issue is patched in versions Tuleap Community Edition 14.2.99.148, Tuleap Enterprise Edition 14.2-5, and Tuleap Enterprise Edition 14.1-6.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00484 · 40.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-12-13T06:46Z
EPSS history
Timeline
  • 13 DEC 06:46Z
    Tuleap MediaWiki standalone "readers" can also edit pages
    cvelistv5