CVE-2023-45372
- Source
- https://cve.org/CVERecord?id=CVE-2023-45372
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-45372.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-45372
- Aliases
- Published
- 2023-10-09T00:00:00Z
- Modified
- 2026-07-15T02:09:30.904631453Z
- Summary
- [none]
- Details
-
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
- Database specific
{ "cna_assigner": "mitre", "unresolved_ranges": [ { "source": "DESCRIPTION", "extracted_events": [ { "fixed": "1.35.12" }, { "introduced": "1.36.x" }, { "fixed": "1.39.x" }, { "fixed": "1.39.5" }, { "introduced": "1.40.x" }, { "fixed": "1.40.1" } ] } ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45372.json" }- References
Affected packages
Git / github.com/wikimedia/mediawiki
Affected ranges
- Type
- GIT
- Repo
- https://github.com/wikimedia/mediawiki
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedLast affected
- Database specific
{ "cpe": [ "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "cpe:2.3:a:mediawiki:mediawiki:1.40.0:-:*:*:*:*:*:*" ], "source": [ "CPE_RANGE", "CPE_STRING" ], "extracted_events": [ { "introduced": "0" }, { "fixed": "1.35.12" }, { "introduced": "1.36.0" }, { "fixed": "1.39.5" }, { "introduced": "1.40.0-NA" }, { "last_affected": "1.40.0-NA" } ] }
Affected versions
1.*
1.1.0
1.3.0beta1
1.35.0
1.35.0-rc.0
1.35.0-rc.1
1.35.0-rc.2
1.35.0-rc.3
1.35.1
1.35.10
1.35.11
1.35.2
1.35.3
1.35.4
1.35.5
1.35.6
1.35.7
1.35.8
1.35.9
1.39.0
1.39.0-rc.0
1.39.0-rc.1
1.39.1
1.39.2
1.39.3
1.39.4
1.40.0
1.40.0-NA
1.5.0alpha1
1.5.0alpha2
1.5.0beta1
1.5.0beta2
1.5.0beta3
1.5.0beta4
1.6.0
Other
test-hashar-for-ci