VULNERABILITY INTELLIGENCE

CVE-2023-45371

CVSS score7.5 HIGH

EPSS probability0.61%

CISA KEVNot currently listed

Published2023-10-09

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging items.

Weakness classification

nvd@nist.gov: CWE-770

Primary references

cve@mitre.org — Issue Tracking, Vendor Advisory
cve@mitre.org — Issue Tracking, Permissions Required
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Permissions Required