A security issue has been found in MediaWiki before version 1.36.1 that allows blocked users to purge pages.
A security issue has been found in MediaWiki before version 1.36.1 that allows blocked users to purge pages.
https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/thread/YR3X4L2CPSEJVSY543AWEO65TD6APXHP/ https://phabricator.wikimedia.org/T280226 https://releases.wikimedia.org/mediawiki/1.36/mediawiki-1.36.1.patch.gz