Launchpad.net

CVE 2017-0369

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it.

See the CVE page on Mitre.org for more details.