Semantic MediaWiki (7.3.0 Before 7.3.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/semantic-mediawiki-7.3.0-before-7.3.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 11:46:27 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSemantic MediaWiki: Missing authorization in smwtask API (CVE-2026-116873)https://feed.craftedsignal.io/briefs/2026-10-semantic-mediawiki-auth-bypass/Tue, 27 Oct 2026 11:46:27 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-semantic-mediawiki-auth-bypass/Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to run queued jobs and force store updates.Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module. This allows unauthenticated attackers to use the public anonymous CSRF token with run-joblist to execute arbitrary job types in unbounded counts, or invoke update on sysop-protected pages. These actions can result in the leakage of page titles and resource exhaustion.

]]>mediumadvisorydenial-of-serviceweb-applicationcve