CVE-2016-6336

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-6336
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6336.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6336
Related
Published
2017-04-20T17:59:00Z
Modified
2025-09-16T06:24:33.435605Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by using Special:Undelete.

References

Affected packages

Debian:11 / mediawiki

Package

Name
mediawiki
Purl
pkg:deb/debian/mediawiki?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.27.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / mediawiki

Package

Name
mediawiki
Purl
pkg:deb/debian/mediawiki?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.27.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / mediawiki

Package

Name
mediawiki
Purl
pkg:deb/debian/mediawiki?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.27.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / mediawiki

Package

Name
mediawiki
Purl
pkg:deb/debian/mediawiki?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.27.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/wikimedia/mediawiki

Affected ranges

Type
GIT
Repo
https://github.com/wikimedia/mediawiki
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1b1588f892b81983d5cd93bea6f5b5d652b2cdf5
Last affected
2e3e7395f1f290fff646510233bf6386fcf01a5d
Last affected
365e22ee61035f953b47387af92ef832f09d5982
Last affected
758cd9d2371d529450448cdf7eb2f1f6e099cfee
Last affected
905d088b12375958099346a922d4f0ccc1db12ca
Last affected
f465524fc4840fb5c8b97e9ee6ffaf2a30c2e644
Last affected
fa11b598b4e396f606c2ffe8a4929c24e0f8cf46

Affected versions

1.*

1.1.0
1.23.0
1.23.0-rc.1
1.23.0-rc.2
1.23.0-rc.3
1.23.0rc0
1.23.1
1.23.10
1.23.11
1.23.12
1.23.13
1.23.14
1.23.2
1.23.3
1.23.4
1.23.5
1.23.6
1.23.7
1.23.8
1.23.9
1.26.0
1.26.1
1.26.2
1.26.3
1.26.4
1.27.0
1.27.0-rc.0
1.27.0-rc.1
1.3.0beta1
1.5.0alpha1
1.5.0alpha2
1.5.0beta1
1.5.0beta2
1.5.0beta3
1.5.0beta4
1.6.0

Other

REL1_26