CVE-2022-47927: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files include credentials data.

Affected products

• Fedoraproject Fedora: version 37 only
• Mediawiki Mediawiki: before 1.35.9 (fixed in 1.35.9); from 1.36.0, before 1.38.5 (fixed in 1.38.5); version 1.39.0 only

Published 2023-01-12. Last modified 2026-06-17.