← All advisories

High severity7.5NVD Advisory· Published Apr 30, 2022· Updated Jun 17, 2026

CVE-2022-28323

CVE-2022-28323

Description

An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

MediaWiki/Mediawikicpe-rescue
Wikimedia Foundation/Mediawikillm-fuzzy
Range: <=1.37.2
MediaWiki/SecurePollllm-fuzzy
Range: <=1.37.2
osv-coords
pkg:bitnami/mediawiki
Range: < 1.37.3

Patches

Vulnerability mechanics

References

3

gerrit.wikimedia.org/r/q/93758c4c13b972d240a6313e0472df1667118893nvdVendor Advisory
gerrit.wikimedia.org/r/q/I9d3b9a942ea71d777ec32121fa36262f549d283dnvdVendor Advisory
phabricator.wikimedia.org/T298434nvdPermissions Required

News mentions

0

No linked articles in our index yet.