{"id":"CVE-2026-25784","details":"Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was intended to restrict internal service authentication to the container network, but evaluated to an empty string when the environment variable WIKI_SERVICE_TOKEN_AUTH_ALLOWED was not set. An empty value disables the IP restriction in the token authenticator component (mwstake/mediawiki-component-token-authenticator). As a result, any user with read access to the wiki (anonymous users on publicly readable wikis) could obtain an application token from the REST API and use it to get a session with sysop privileges as the internal service user.\n\nThis issue affects BlueSpice: from 5.2.3 before 5.2.7, and the 5.2.7 container images published before 2026-10-19 15:37 UTC.","modified":"2026-11-04T02:30:33.583377713Z","published":"2026-10-23T09:17:06.943Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"source":"DESCRIPTION","range":[{"fixed":"2026-10-19"}]}]}]},"references":[{"type":"WEB","url":"https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2026-07"},{"type":"FIX","url":"https://github.com/hallowelt/docker-bluespice-wiki/commit/04b840be565b508f6e741c376970909b69d2a444"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/hallowelt/docker-bluespice-wiki","events":[{"introduced":"226ef8e655bab06c3774c27406415425b4992940"},{"fixed":"04b840be565b508f6e741c376970909b69d2a444"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"5.2.3"},{"fixed":"5.2.7"}],"source":"DESCRIPTION"},{"range":[{"fixed":"04b840be565b508f6e741c376970909b69d2a444"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["5.2.6+SODIUM","5.2.6","5.2.5.2","5.2.5.1","5.2.5","5.2.4","5.2.3.2","5.2.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25784.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}]}