Search for packages
| purl | pkg:composer/mediawiki/abuse-filter@1.42.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-eufd-erhj-bubj
Aliases: CVE-2024-47913 GHSA-rmcp-9fhq-58pv |
Improper permissions handling in MediaWiki AbuseFilter An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. An API caller can match a filter condition against AbuseFilter logs even if the caller is not authorized to view the log details for the filter. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-02T12:40:08.957037+00:00 | GitLab Importer | Affected by | VCID-eufd-erhj-bubj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/abuse-filter/CVE-2024-47913.yml | 38.0.0 |
| 2026-04-01T16:06:32.005770+00:00 | GHSA Importer | Affected by | VCID-eufd-erhj-bubj | https://github.com/advisories/GHSA-rmcp-9fhq-58pv | 38.0.0 |