CVE-2023-45371 Information

Description

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. There is no rate limit for merging items.

Reference

https://phabricator.wikimedia.org/T345064 https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264