logo

Database

Improper authorization control for web services In mediawiki/core

Description

multiple issues

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2018-132582. NVD-2018-132583. OSV-2018-132584. GCVE-2018-13258

References

1. https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-13258.yaml2. https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html3. https://phabricator.wikimedia.org/T1990294. http://www.securitytracker.com/id/1041695

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.