Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2024-29883

CreateWiki's wiki request suppression ignores the suppression settings set by the suppressor

Description

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Suppression of wiki requests does not work as intended, and always restricts visibility to those with the `(createwiki)` user right regardless of the settings one sets on a given wiki request. This may expose information to users who are not supposed to be able to access it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

miraheze CreateWiki

  • < 0c7c4f93834349be8f5c2a678e9a85b4b1aa7babaffected

References