← All advisories

Unrated severityNVD Advisory· Published Mar 30, 2022· Updated Aug 3, 2024

CVE-2022-28205

CVE-2022-28205

Description

An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

MediaWiki/Mediawikicpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.37.1
Wikimedia Foundation/CentralAuthllm-fuzzy
Range: <=1.37.1
osv-coords
pkg:bitnami/mediawiki
Range: < 1.37.2

Patches

Vulnerability mechanics

References

3

security.gentoo.org/glsa/202305-24mitrevendor-advisory
gerrit.wikimedia.org/r/q/Ic6ba1a37b78df5b342ceeba4c1493dbde583b81fmitre
phabricator.wikimedia.org/T302248mitre

News mentions

0

No linked articles in our index yet.