critical9.8
CVE-2022-28205
An issue was discovered in MediaWiki through 1.37.1.
Impact
An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.37.1 |
References
- NVD record
- CVE.org record
- https://gerrit.wikimedia.org/r/q/Ic6ba1a37b78df5b342ceeba4c1493dbde583b81f
- https://phabricator.wikimedia.org/T302248
- https://security.gentoo.org/glsa/202305-24
- https://gerrit.wikimedia.org/r/q/Ic6ba1a37b78df5b342ceeba4c1493dbde583b81f
- https://phabricator.wikimedia.org/T302248
- https://security.gentoo.org/glsa/202305-24