CVE-2020-5302

MEDIUM 6.5CVE-2020-5302 · Published 07/04/2020 · updated 17/06/2026

In short

CVE-2020-5302 is a MEDIUM (CVSS 6.5) vulnerability affecting mh-wikibot (mh-wikibot project).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 59.8% of all vulnerabilities.
Fix: update to 2020-04-06 or later.

Package	Affected versions	Patched versions
mh-wikibot mh-wikibot_project	`< 2020-04-06`	`2020-04-06`

Description

MH-WikiBot (an IRC Bot for interacting with the Miraheze API), had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in commit 23d9d5b0a59667a5d6816fdabb960b537a5f9ed1.

References

examknow/MH-WikiBot
examknow/MH-WikiBot security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free