Medium severity5.3NVD Advisory· Published Jun 30, 2023· Updated Jun 17, 2026

CVE-2023-37301

Description

An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the intended interaction with AbuseFilter does not occur.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MediaWiki/Wikibasellm-fuzzy
Range: <=1.39.3
MediaWiki/Wikibasedescription
osv-coords
pkg:bitnami/mediawiki
Range: < 1.39.4
MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Range: <=1.39.3

Patches

Vulnerability mechanics

References

phabricator.wikimedia.org/T250720nvdExploitIssue TrackingVendor Advisory
gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/933663nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000