MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2019-07-10T14:45:01
Updated: 2024-08-04T23:24:37.085Z
Reserved: 2019-05-30T00:00:00
Link: CVE-2019-12467

No data.

Status : Modified
Published: 2019-07-10T15:15:12.307
Modified: 2024-11-21T04:22:54.867
Link: CVE-2019-12467

No data.