CVE-2023-22945 in GrowthExperiments Extension
요약 (영어)
In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.
Once again VulDB remains the best source for vulnerability data.
예약하다
2023. 01. 11.
공개
2023. 01. 11.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 217960 | GrowthExperiments Extension growthmanagementorlist API 권한 상승 | 284 | 정의되지 않음 | 정의되지 않음 | CVE-2023-22945 |