Critical severity9.8NVD Advisory· Published Apr 29, 2022· Updated Jun 17, 2026

CVE-2022-29906

Description

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check for the quizadmin user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MediaWiki/QuizGamellm-fuzzy
Range: <665e33a68f6fa1167df99c0aa18ed0157cdf9f66
osv-coords
pkg:bitnami/mediawiki
Range: < 1.37.3
MediaWiki/QuizGame extensiondescription
MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Range: <=1.37.2

Patches

Vulnerability mechanics

References

phabricator.wikimedia.org/T302199nvdExploitPatchThird Party Advisory
gerrit.wikimedia.org/r/c/mediawiki/extensions/QuizGame/+/765651nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000