Vulnerability CVE-2022-29547
Published: 2022-04-21

Description:
The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.

 References:
https://phabricator.miraheze.org/T9061
https://phabricator.wikimedia.org/T306174
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CreateRedirect/+/780567
Copyright 2026, cxsecurity.com

 

Back to Top