CVE-2022-29547

ALTO 7.5CVE-2022-29547 · Published 21/04/2022 · updated 17/06/2026

Em resumo

CVE-2022-29547 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta createredirect (mediawiki).
Chance de exploração nos próximos 30 dias (EPSS): 1.0%, maior que 62.9% das vulnerabilidades.
Correção: atualize para 2022-04-14 ou posterior.

Package	Affected versions	Patched versions
createredirect mediawiki	`< 2022-04-14`	`2022-04-14`

Description

The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.

References

gerrit.wikimedia.org/r/c/mediawiki/extensions/CreateRedirect/+/780567 · Vendor Advisory
phabricator.miraheze.org/T9061 · Issue Tracking
phabricator.wikimedia.org/T306174 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free