UpHeron
All vulnerabilities

Servers and applications

CVE-2020-10534

In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled.

Severity
Critical 9.8
Published
12 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki
  • Every version up to 1.34.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-10534
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-10534