Threats tagged 'ghsa-3835-4xp5-hjqc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.3%	CVE-2026-100240Wikimedia Foundation Mediawiki - TemplateSandbox Extension · Missing Authorization Vulnerability Critical9.1EPSS 0.3%2026-09-29GCVE DatabaseCVE-2026-100240 CVE-2026-100240 is a critical missing authorization vulnerability in the Wikimedia Foundation's Mediawiki TemplateSandbox Extension. It allows unauthorized access to functionality that is not properly constrained by access control lists (ACLs). The vulnerability affects multiple versions of the TemplateSandbox Extension prior to 1.46.1, including specific ranges 1.43.0 to before 1.43.10 and 1.45.0 to before 1.45.5. EPSS 0.3%Report on CVE-2026-100240 Vulnerability CWE-862 #ghsa-3835-4xp5-hjqc	GCVE Database	2026-09-29

Page 1 of 1