MediaWiki up to 1.35.7/1.37.4/1.38.2 on Special Special:Contributions Page reassignEdits.php access control

Summaryinfo

A vulnerability marked as critical has been reported in MediaWiki up to 1.35.7/1.37.4/1.38.2 on Special. Impacted is an unknown function of the file reassignEdits.php of the component Special:Contributions Page. The manipulation leads to access control. This vulnerability is referenced as CVE-2022-41767. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in MediaWiki up to 1.35.7/1.37.4/1.38.2 on Special (Content Management System) and classified as critical. This issue affects an unknown code of the file reassignEdits.php of the component Special:Contributions Page. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned to a user (using reassignEdits.php), the changes will still be attributed to the IP address on Special:Contributions when doing a range lookup.

The weakness was published 12/26/2022. It is possible to read the advisory at phabricator.wikimedia.org. The identification of this vulnerability is CVE-2022-41767 since 09/29/2022. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

By approaching the search of inurl:reassignEdits.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 1.35.8, 1.37.5 or 1.38.3 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• MediaWiki

Version

• 1.35.0
• 1.35.1
• 1.35.2
• 1.35.3
• 1.35.4
• 1.35.5
• 1.35.6
• 1.35.7
• 1.37.0
• 1.37.1
• 1.37.2
• 1.37.3
• 1.37.4
• 1.38.0
• 1.38.1
• 1.38.2

License

• open-source

Website

• Product: https://www.mediawiki.org/wiki/MediaWiki

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion