Threats tagged 'ghsa-9974-qjxm-mc96'

Semantic MediaWiki versions from 7.3.1 up to but not including 7.4.1 contain an incorrect authorization vulnerability in the EditProtectionUpdater::userMayChangeProtection() function. This flaw allows editors to bypass edit and move protection by adding a specific template code that removes administrator protections logged under the administrator's name. The vulnerability can lead to unauthorized changes despite protection mechanisms.