BIT-mediawiki-2020-10534

vendorUSosv

view advisory published 2024-03-06Licence: per source

In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-10534US	critical9.8OT elevated	1.21% (68th)	—	2020-03-12
In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. T…

references

External citations — patches, advisories, analysis.

https://gerrit.wikimedia.org/r/#/q/I9cc5fb2c08c78bbd797a5fc6d89f4577c8cc118bWEB
https://nvd.nist.gov/vuln/detail/CVE-2020-10534WEB
https://phabricator.wikimedia.org/T229731WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan