Cpe:2.3:a:wikimedia:wikibase:*:*:*:*:*:*:*:*

An object injection vulnerability in the Wikibase action=parse API enables attackers with low-privilege access to achieve remote code execution via serialized PHP entities.