Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Redbluegreenhat

#40733of 53,624
6.5Total CVSS
Vulnerabilities · 1
PT-2024-23119
6.5
2024-03-28
Mediawiki · Createwiki · CVE-2024-29898
**Name of the Vulnerable Software and Affected Versions** CreateWiki versions prior to the version containing the fix in commit 8f8442ed5299510ea3e58416004b9334134c149c **Description** An issue in CreateWiki, a MediaWiki extension, may have exposed suppressed wiki requests to private wikis. This occurred when Special:RequestWikiQueue was added to the read whitelist, potentially allowing users without the `read` permission to access it. **Recommendations** For versions prior to the fix, update to a version that includes the fix in commit 8f8442ed5299510ea3e58416004b9334134c149c to resolve the issue. As a temporary workaround, consider removing Special:RequestWikiQueue from the read whitelist for private wikis until the update is applied.