CVE-2023-37301

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p27

Published

Jun 30, 2023 (Jun 30, 2023)

Modified

Jun 17, 2026

Description

An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the intended interaction with AbuseFilter does not occur.

Vendors: mediawiki
Products: mediawiki
Weakness: CWE-326
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.