CVE-2022-28201

PoC —

CVSS 3.1

4.4 medium

EPSS

<1%p35

Published

Sep 19, 2022 (Sep 19, 2022)

Modified

Jun 17, 2026

Description

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message.

Vendors: mediawiki debian
Products: mediawiki, debian linux
Weakness: CWE-674
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.