Wikimedia · Mediawiki · CVE-2019-12472
**Name of the Vulnerable Software and Affected Versions**
MediaWiki versions 1.18.0 through 1.32.1
**Description**
The issue is related to an Incorrect Access Control vulnerability. It allows bypassing the limits on IP range blocks by utilizing the API. This could potentially enable a remote attacker to compromise data integrity.
**Recommendations**
For MediaWiki versions 1.18.0 through 1.32.1, update to version 1.32.2, 1.31.2, 1.30.2, or 1.27.6 to resolve the issue.
As a temporary workaround, consider restricting access to the API until the update is applied.