Home

Description

Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.

PUBLISHED Reserved 2026-01-09 | Published 2026-01-09 | Updated 2026-01-09 | Assigner wikimedia-foundation

Problem types

CWE-862 Missing Authorization

Product status

Default status
unaffected

1.45
affected

1.44
affected

1.43
affected

1.39
affected

References

phabricator.wikimedia.org/T410560

gerrit.wikimedia.org/...049691258c8bd2555e599b9b88490fbe3358

cve.org (CVE-2026-0817)

nvd.nist.gov (CVE-2026-0817)

Download JSON