Security Advisory

CVE-2016-6337

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-20 17:00:00

Last updated 2024-08-06 01:29:19

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights.

← Browse all CVEs View on cve.org ↗