An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles the check for edit rights.Referenceshttps://phabricator.wikimedia.org/T294256https://gerrit.wikimedia.org/r/q/I84be9cd3639b8ab0e037a4ec2d3f2f478f0989c5https://security.gentoo.org/glsa/202305-24
