Security Advisory

CVE-2022-29904

9.8
CRITICAL

Vulnerability Description

The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain '-' and '_' constraints.
Published Date April 29, 2022
Official Source NIST NVD Advisory