Threats tagged 'ghsa-h5hg-vmvh-92x7'

YesWiki versions prior to 4.7.0 have a vulnerability in the AclService::updateRequestWithACL function where usernames are interpolated into SQL LIKE patterns without escaping wildcard characters. This allows self-registered attackers to bypass read access controls by using specially crafted usernames containing wildcards, enabling unauthorized reading of restricted pages and Bazar entries via the public Bazar listing API.