Lucene search
PRIOn knowledge basePRION:CVE-2022-47927HistoryJan 12, 2023 - 6:15 a.m.
Code injection
2023-01-1206:15:00
PRIOn knowledge base
www.prio-n.com
6
mediawiki
installation
weak permissions
sqlite
file mode vulnerability
credentials data
nvd
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files include credentials data.
References
lists.debian.org/debian-lts-announce/2023/07/msg00011.html
lists.fedoraproject.org/archives/list/[email protected]/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/
lists.wikimedia.org/hyperkitty/list/[email protected]/thread/UEMW64LVEH3BEXCJV43CVS6XPYURKWU3/
phabricator.wikimedia.org/T322637
security.gentoo.org/glsa/202305-24
Related
cnvd
cnvd
MediaWiki has an unspecified vulnerability (CNVD-2023-06083)
2023-01-12 00:00:00
osv
osv
BIT-mediawiki-2022-47927
2024-03-06 11:03:27
CVE-2022-47927
2023-01-12 06:15:08
mediawiki - security update
2023-07-10 00:00:00
debiancve
debiancve
CVE-2022-47927
2023-01-12 06:15:08
cve
cve
CVE-2022-47927
2023-01-12 06:15:08
ubuntucve
ubuntucve
CVE-2022-47927
2023-01-12 00:00:00
debian
debian
[SECURITY] [DLA 3489-1] mediawiki security update
2023-07-10 20:45:42
veracode
veracode
Information Disclosure
2022-12-29 14:51:17
redhatcve
redhatcve
CVE-2022-47927
2023-01-13 06:05:04
nessus
nessus
Debian DLA-3489-1 : mediawiki - LTS security update
2023-07-11 00:00:00
Fedora 37 : mediawiki (2023-30a7a812f0)
2023-01-27 00:00:00
GLSA-202305-24 : MediaWiki: Multiple Vulnerabilities
2023-05-21 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3489-1)
2023-07-11 00:00:00
nvd
nvd
CVE-2022-47927
2023-01-12 06:15:08
cvelist
cvelist
CVE-2022-47927
2023-01-12 00:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerability
2023-06-28 08:21:41
fedora
fedora
[SECURITY] Fedora 37 Update: mediawiki-1.38.5-1.fc37
2023-01-27 08:58:39
gentoo
gentoo
MediaWiki: Multiple Vulnerabilities
2023-05-21 00:00:00