| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | ≥ 1.35.0, < 1.35.4≥ 1.36.0, < 1.36.2< 1.31.16 | 1.35.41.36.21.31.16 |
The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time (due to the job queue backlog)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free