CVE-2022-24813CWE-287CWE-288

Authentication Bypass Using an Alternate Path or Channel in CreateWiki

Medium · published April 4, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymous comments can be made using Special:RequestWikiQueue when sent directly via POST. A patch for this issue is available in the `master` branch of CreateWiki's GitHub repository.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01008 · 62.7th percentile
Weaknesses
CWE-287 · Improper Authentication; CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2022-04-04T17:40Z
EPSS history
Timeline
  • 04 APR 17:40Z
    Authentication Bypass Using an Alternate Path or Channel in CreateWiki
    cvelistv5