An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.
References
Configurations
History
21 Nov 2024, 07:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_39/RELEASE-NOTES-1.39 - Release Notes | |
| References | () https://lists.debian.org/debian-lts-announce/2023/08/msg00029.html - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7/ - | |
| References | () https://phabricator.wikimedia.org/T285159 - Issue Tracking, Permissions Required | |
| References | () https://www.debian.org/security/2023/dsa-5447 - |
07 Nov 2023, 04:11
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
23 Aug 2023, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Jul 2023, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2023-03-31 19:15
Updated : 2024-11-21 07:56
NVD link : CVE-2023-29141
Mitre link : CVE-2023-29141
CVE.ORG link : CVE-2023-29141
JSON object : View
Products Affected
fedoraproject
- fedora
mediawiki
- mediawiki
CWE