| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | ≤ 1.39.0 |
In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free