What’s Vulnerable › Vulnerabilities

CVE-2022-28323

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-30 · updated 2026-06-17

Description

An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,

Affected products

• Wikimedia Foundation MediaWiki: through 1.37.2

References

• https://gerrit.wikimedia.org/r/q/93758c4c13b972d240a6313e0472df1667118893
• https://gerrit.wikimedia.org/r/q/I9d3b9a942ea71d777ec32121fa36262f549d283d
• https://phabricator.wikimedia.org/T298434
• https://gerrit.wikimedia.org/r/q/93758c4c13b972d240a6313e0472df1667118893
• https://gerrit.wikimedia.org/r/q/I9d3b9a942ea71d777ec32121fa36262f549d283d
• https://phabricator.wikimedia.org/T298434

Get alerted when CVE-2022-28323 or the next vulnerability affects your stack