CVE-2022-28205 log
| Source |
|
| Severity | Critical |
| Remote | Unknown |
| Type | Unknown |
| Description | An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2676 | mediawiki | 1.37.1-1 | 1.37.2-1 | Critical | Not affected |
| References |
|---|
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CentralAuth/+/765335 https://phabricator.wikimedia.org/T302248 |
| Notes |
|---|
pkgbuild does not build affected extension |