MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by using Special:Undelete.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2017-04-20T17:00:00
Updated: 2024-08-06T01:29:19.386Z
Reserved: 2016-07-26T00:00:00
Link: CVE-2016-6336
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-04-20T17:59:00.743
Modified: 2017-04-24T20:25:05.943
Link: CVE-2016-6336
Redhat
No data.