CVE-2018-0503

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-0503
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0503.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-0503
Aliases
Related
Published
2018-10-04T20:29:00Z
Modified
2024-09-18T02:59:48.211023Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.

References

Affected packages

Debian:11 / mediawiki

Package

Name
mediawiki
Purl
pkg:deb/debian/mediawiki?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.31.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / mediawiki

Package

Name
mediawiki
Purl
pkg:deb/debian/mediawiki?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.31.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / mediawiki

Package

Name
mediawiki
Purl
pkg:deb/debian/mediawiki?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.31.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/wikimedia/mediawiki

Affected ranges

Type
GIT
Repo
https://github.com/wikimedia/mediawiki
Events
Introduced
5cfc9accca2cc2fb94060c309d562913b7bed57c
Fixed
a4c806563471b16c644186618b39b84069c0d04c

Affected versions

1.*

1.31.0