CVE-2023-45371
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-45371 is a vulnerability that affects the Wikibase extension for MediaWiki versions before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It is a high-severity vulnerability with a base score of 7.5 and an impact score of 3.6 according to NVD@NIST. The vulnerability allows merging items without any rate limit, posing a potential danger to organizations using the affected versions of MediaWiki and Wikibase extensions. The vulnerability has an attack vector of network, requires no privileges, and does not require user interaction. To remediate the issue, organizations should update their MediaWiki installation to version 1.35.12, 1.39.5, or 1.40.1 or apply appropriate patches provided by the vendor to mitigate the risk of exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions