CVE Catalog
CVE-2023-37301
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the intended interaction with AbuseFilter does not occur.
Risk Assessment
The lack of proper interaction with AbuseFilter may lead to unauthorized changes in data, posing a risk to the integrity of the system.
Recommendation
It is recommended to update MediaWiki to the latest version to ensure the proper functioning of undo and restore features.
Original NVD description (English source)
An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the intended interaction with AbuseFilter does not occur.