Approved changes feed: RSS · Atom

cpe:2.3:a:wikimedia:campaignevents:1.39:*:*:*:*:mediawiki:*:*

part: a version: 1.39 update: *

VendorWikimedia (15e2dd53-d178-575c-9871-f6b2d83e2814)
ProductCampaignevents (6de8c5de-66ef-5694-8457-54aba938ea2b)
Edition*
Language*
Software edition*
Target softwaremediawiki
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wikimedia/mediawiki-extensions-campaignevents purl2cpe 2026-06-01 10:12:41.871743

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0817 vulnerable 2026-06-03 15:14:42.908391 CampaignEvents API missing authorization exposes meeting and chat URLs
Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.
Published: 2026-01-09T15:50:50.616Z
Updated: 2026-01-09T17:37:36.036Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.