CVE-2017-0369 - log back

CVE-2017-0369 created at 25 Sep 2019 19:31:40
Severity
+ Low
Remote
+ Remote
Type
+ Access restriction bypass
Description
+ In MediaWiki < 1.28.1, a normal sysop that doesn't have the necessary rights to override a page protection can still recreate it by restoring a former revision of that page.
References
+ https://phabricator.wikimedia.org/T108138
+ https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html
Notes