CVE-2016-6331
Fixed in a distro release EPSS 2%
ApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to bypass intended per-title read restrictions via a parse action to api.php.
Products: mediawiki
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mediawiki | 1:1.27.1-1 |
| Debian 13 | mediawiki | 1:1.27.1-1 |
| Debian 14 | mediawiki | 1:1.27.1-1 |