After nearly a year of being disabled, WikiForum's security flaws have not been fixed and the security on the extension has raised some eyes. It should accordingly be removed for 1.40.
Description
Description
Status | Assigned | Task | ||
---|---|---|---|---|
Resolved | Agent_Isai | T11308 Upgrade to MediaWiki 1.41 | ||
Resolved | Universal_Omega | T10916 Prepare for MediaWiki 1.41 | ||
Resolved | None | T10612 Upgrade to MediaWiki 1.40 | ||
Resolved | None | T10680 Test extensions for MediaWiki 1.40 | ||
Open | None | T10871 Undeploy WikiForum for MediaWiki 1.40 |
Event Timeline
Comment Actions
Second PR to actually remove the git submodule; changing to stalled for now awaiting SRE merging/comments.
Comment Actions
Reopening since Miraheze survived and the extension remains vulnerable even after more than a year of discovery.