← All advisories

Critical severity9.8NVD Advisory· Published Mar 30, 2022· Updated Jun 17, 2026

CVE-2022-28206

CVE-2022-28206

Description

An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles the check for edit rights.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

MediaWiki/Mediawiki2 versions
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: <=1.37.1
- (no CPE)
MediaWiki/FileImporterllm-fuzzy
Range: <=1.37.1
Wikimedia Foundation/Mediawikillm-fuzzy
Range: <=1.37.1
osv-coords
pkg:bitnami/mediawiki
Range: < 1.37.2

Patches

Vulnerability mechanics

References

3

gerrit.wikimedia.org/r/q/I84be9cd3639b8ab0e037a4ec2d3f2f478f0989c5nvdPatchThird Party Advisory
phabricator.wikimedia.org/T294256nvdExploitIssue TrackingVendor Advisory
security.gentoo.org/glsa/202305-24nvd

News mentions

0

No linked articles in our index yet.