CVE-2022-29547

HIGH · CVSS 7.5 EPSS 0.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-29547

Severity

HIGH

CVSS

7.5

EPSS

0.96%

Original NVD Description

The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.