Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 7.3.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Semantic MediaWiki, an extension for MediaWiki (the software behind Wikipedia), is affected in versions from 7.3.0 before 7.3.1. The flaw lets unauthenticated users trigger queued jobs and forced store updates through its API, which can expose page titles and consume server resources.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to run queued jobs and force store updates. Attackers can use the public anonymous CSRF token with run-joblist to execute arbitrary job types in unbounded counts, or invoke update on sysop-protected pages, leaking page titles and exhausting resources.
Timeline
- CVE published
- Record last updated
- First seen by cve.now
Affected versions
- SemanticMediaWiki SemanticMediaWiki
From 7.3.0 · fixed in 7.3.1