Medium severity4.3NVD Advisory· Published Jan 11, 2023· Updated Jun 17, 2026
CVE-2023-22945
CVE-2023-22945
Description
In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- MediaWiki/GrowthExperiments extensiondescription
- Range: <=1.39
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- gerrit.wikimedia.org/r/q/Id1b83fcd58eccb8b2dfea44a3ab2f72314860d88nvdPatchVendor Advisory
- phabricator.wikimedia.org/T321733nvdIssue TrackingPatchVendor Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/nvd
News mentions
0No linked articles in our index yet.