CVE-2019-19709: Debian Linux

Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.

MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Mediawiki Mediawiki: up to and including 1.33.1

Published 2019-12-11. Last modified 2026-06-17.