https://bugzilla.wikimedia.org/show_bug.cgi?id=60178

--- Comment #14 from Kunal Mehta (Legoktm) <[email protected]> ---
(In reply to comment #13)
> (In reply to comment #12)
> > re comment 10
> >> including the capability to edit any page in the MediaWiki namespace of a 
> >> wiki
> > 
> > The bug seems to be about being able to blank any page (Still quite
> > concerning, but not the same type of attack possibilities)
> 
> https://www.mediawiki.org/w/index.php?title=MediaWiki:
> I_hope_this_doesn%27t_work&action=history
> 
> As I understand it, the vulnerability discovered in bug 60218 applied to any
> page and the content could be arbitrary content.

Any page, but fixed content. It would replace the page with the
'flow-talk-taken-over' message, which in English is: 'This talk page has been
taken over by a [https://www.mediawiki.org/wiki/Special:MyLanguage/Flow_Portal
Flow board].'

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to