{"id":"CVE-2020-5302","details":"MH-WikiBot (an IRC Bot for interacting with the Miraheze API), had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in commit 23d9d5b0a59667a5d6816fdabb960b537a5f9ed1.","aliases":["GHSA-7hf3-wvp8-34r9"],"modified":"2026-10-20T10:54:23.208886672Z","published":"2020-04-07T16:15:18.557Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:mh-wikibot_project:mh-wikibot:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"2020-04-06"}],"source":"CPE_RANGE"}],"vendor_product":"mh-wikibot_project:mh-wikibot"}]},"references":[{"type":"WEB","url":"https://github.com/examknow/MH-WikiBot/compare/2eac90d...1a62da1"},{"type":"ADVISORY","url":"https://github.com/examknow/MH-WikiBot/security/advisories/GHSA-7hf3-wvp8-34r9"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/examknow/mh-wikibot","events":[{"introduced":"0"},{"fixed":"23d9d5b0a59667a5d6816fdabb960b537a5f9ed1"},{"last_affected":"23d9d5b0a59667a5d6816fdabb960b537a5f9ed1"}],"database_specific":{"extracted_events":[{"source":"DESCRIPTION","range":[{"introduced":"0"},{"fixed":"23d9d5b0a59667a5d6816fdabb960b537a5f9ed1"}]},{"source":"DESCRIPTION","range":[{"introduced":"0"},{"last_affected":"23d9d5b0a59667a5d6816fdabb960b537a5f9ed1"}]}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-5302.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}