Semantic Mediawiki 7.3.0 Missing Authorization Via Smwtask Api Run Joblist And Update

Back www.vulncheck.com

Semantic Mediawiki 7.3.0 Missing Authorization Via Smwtask Api Run Joblist And Update

www.vulncheck.com • October 27, 2026

Share: View original

Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update

SemanticMediaWiki >= 7.3.0, = 7.3.0, < 7.3.1

CWE-862 Missing Authorization

GitHub Security Advisory (GHSA-rjqv-6r83-pg8v)

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Semantic MediaWiki Versions Expose Authorization Flaws Semantic MediaWiki versions 2.5.0, 3.0.0, and 7.3.0 are affected by authorization vulnerabilities. The flaws allow unauthorized access through the smwtask API and isEditProtected methods, impacting all versions from 2.5.0 to 7.3.0. The vulnerabilities are categorized under CWE-862 for missing authorization. The affected systems include Semantic MediaWiki installations prior to version 7.3.1. Current advisories recommend immediate updates to mitigate risks. GitHub Security Advisories have documented these vulnerabilities, with CVEs GHSA-rjqv-6r83-pg8v and GHSA-9824-67pm-c29j noted. No has been reported yet, but the potential for abuse exists. 58

Extracted Entities

CWE Weaknesses (1)

CWE-862 - Missing Authorization

Vulnerabilities (1)

GHSA-rjqv-6r83-pg8v