Mediawiki: >> Mediawiki >> 1.27.0 Security Vulnerabilities
MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights.
CVSS Score
7.5
EPSS Score
0.012
Published
2017-04-20
Page 22