| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki/core | ≥ 1.27.0, < 1.27.5≥ 1.29.0, < 1.29.3≥ 1.30.0, < 1.30.1≥ 1.31.0, < 1.31.1 | 1.27.51.29.31.30.11.31.1 |
| mediawiki | = 1.27.5= 1.29.3= 1.30.1≥ 1.31.0, < 1.31.1 | 1.31.1 |
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free