UpHeron
All vulnerabilities

Servers and applications

CVE-2022-28323

An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,

Severity
High 7.5
Published
30 Apr 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki
  • Every version up to 1.37.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-28323
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-28323