CVE-2023-45372
- Source
- https://cve.org/CVERecord?id=CVE-2023-45372
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-45372.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-45372
- Aliases
- Published
- 2023-10-09T06:15:10.607Z
- Modified
- 2026-03-14T12:15:53.130063Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
- References
Affected packages
Git / github.com/wikimedia/mediawiki
Affected ranges
- Type
- GIT
- Repo
- https://github.com/wikimedia/mediawiki
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affected
- Database specific
{ "versions": [ { "introduced": "0" }, { "fixed": "1.35.12" }, { "introduced": "1.36.0" }, { "fixed": "1.39.5" }, { "introduced": "0" }, { "last_affected": "1.40.0-NA" } ] }