VULNERABILITY INTELLIGENCE

CVE-2022-29547

CVSS score7.5 HIGH

EPSS probability1.00%

CISA KEVNot currently listed

Published2022-04-21

Last modified2026-06-17

Description

The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.