Related Vulnerabilities: CVE-2022-28205  

An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future.

Severity Critical

Remote Unknown

Type Unknown

Description

An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future.

AVG-2676 mediawiki 1.37.1-1 1.37.2-1 Critical Not affected

https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CentralAuth/+/765335
https://phabricator.wikimedia.org/T302248

pkgbuild does not build affected extension