https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:31:18 +0000 https://cve.radiocsirt.org/vuln/cve-2024-47816 <p><strong>Affected:</strong> miraheze ImportDump</p> <p>ImportDump is a mediawiki extension designed to automate user import requests. A user&#39;s local actor ID is stored in the database to tell who made what requests. Therefore, if a user on another wiki happens to have the same actor ID as someone on the central wiki, the user on the other wiki can act as if they&#39;re the original wiki requester. This can be abused to create new comments, edit the request, and view the request if it&#39;s marked private. This issue has been addressed in commit `5c91dfc` and all users are advised to update. Users unable to update may disable the special page outside of their global wiki. See `miraheze/mw-config@e566499` for details on that.</p> <p><strong>Affected:</strong> miraheze ImportDump</p> <p>ImportDump is a mediawiki extension designed to automate user import requests. A user&#39;s local actor ID is stored in the database to tell who made what requests. Therefore, if a user on another wiki happens to have the same actor ID as someone on the central wiki, the user on the other wiki can act as if they&#39;re the original wiki requester. This can be abused to create new comments, edit the request, and view the request if it&#39;s marked private. This issue has been addressed in commit `5c91dfc` and all users are advised to update. Users unable to update may disable the special page outside of their global wiki. See `miraheze/mw-config@e566499` for details on that.</p> https://cve.radiocsirt.org/vuln/cve-2024-47816