CVE-2023-22945 (published 2023-01-11T00:00:00)
In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a