CVE-2016-6336
N/A
N/A
Summary
MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by using Special:Undelete.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1369613
- https://phabricator.wikimedia.org/T132926
References
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1369613
- https://phabricator.wikimedia.org/T132926
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.