← All advisories

Critical severity9.8NVD Advisory· Published Mar 30, 2022· Updated Jun 17, 2026

CVE-2022-28205

CVE-2022-28205

Description

An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

MediaWiki/Mediawiki2 versions
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: <=1.37.1
- (no CPE)
MediaWiki/CentralAuthllm-fuzzy
Range: <=1.37.1
osv-coords
pkg:bitnami/mediawiki
Range: < 1.37.2

Patches

Vulnerability mechanics

References

3

gerrit.wikimedia.org/r/q/Ic6ba1a37b78df5b342ceeba4c1493dbde583b81fnvdPatchThird Party Advisory
phabricator.wikimedia.org/T302248nvdExploitIssue TrackingPatchVendor Advisory
security.gentoo.org/glsa/202305-24nvd

News mentions

0

No linked articles in our index yet.