mediawiki/core is a Free software wiki application developed by the Wikimedia Foundation and others.
Note: This package is not maintained on
Packagist anymore, but newer releases exist.
Affected versions of this package are vulnerable to Access Restriction Bypass. Blocked users are unable to use
Special:ResetTokens. This has security relevance because a blocked user might have accidentally shared a token, or might know that a token has been compromised, and yet is not able to block any potential future use of the token by an unauthorized party.
mediawiki/core to version 1.31.12, 1.35.2 or higher.