CVE-2016-6337

Fixed in a distro release EPSS 1%

MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights.

Published 2017-04-20 · CVE record · OSV

Products: mediawiki

Distro releases