Mediawiki: >> Createredirect Security Vulnerabilities
The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-04-21