| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | = 1.27.0 |
MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free