CVE-2024-47848: User can review/unreview articles while blocked

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - PageTriage allows Authentication Bypass.This issue affects Mediawiki - PageTriage: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 44% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

MP

Mediawiki - PageTriage · The Wikimedia Foundation

1.39.x before 1.39.9; 1.41.x before 1.41.3; 1.42.x before 1.42.2 · source: vendor

PA

Pagetriage · Wikimedia

1.39.0 before 1.39.9; 1.41.0 before 1.41.3; 1.42.0 before 1.42.2 · source: CISA