mediawiki/core is a Free software wiki application developed by the Wikimedia Foundation and others.
Note: This package is not maintained on
Packagist anymore, but newer releases exist.
Affected versions of this package are vulnerable to Access Restriction Bypass. Users can bypass intended restrictions on deleting pages in certain "fast double move" situations.
MovePage::isValidMoveTarget() uses FOR UPDATE, but it's only called if
Title::getArticleID() returns non-zero with no special flags. Next,
MovePage::moveToInternal() will delete the page if
getArticleID(READ_LATEST) is non-zero. Therefore, if the page is missing in the replica DB,
isValidMove() will return true, and then
moveToInternal() will unconditionally delete the page if it can be found in the master.
mediawiki/core to version 1.35.2, 1.31.12 or higher.