← All advisories

Critical severity9.8NVD Advisory· Published Mar 30, 2022· Updated Jun 17, 2026

CVE-2022-28209

CVE-2022-28209

Description

An issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof permission in the AntiSpoof extension is incorrect.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

osv-coords
pkg:bitnami/mediawiki
Range: < 1.37.2
MediaWiki/AntiSpoofllm-fuzzy
Range: <=1.37.1
Wikimedia Foundation/Mediawikillm-fuzzy
Range: <=1.37.1
MediaWiki/Mediawikicpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: <=1.37.1

Patches

Vulnerability mechanics

References

3

gerrit.wikimedia.org/r/q/Id8c4e2e336695ce70ccdf8a51ad729bf4a99f8f7nvdPatchThird Party Advisory
phabricator.wikimedia.org/T304126nvdIssue TrackingPatchVendor Advisory
security.gentoo.org/glsa/202305-24nvd

News mentions

0

No linked articles in our index yet.