[MEDIUM] BotPassword can bypass CentralAuth's account lock

PKSA-rr5m-4z44-9fg2 CVE-2018-0505 GHSA-5c6w-f4w2-2grp

Affected package: mediawiki/core

Affected version: >=1.27.0,<1.27.5|>=1.29.0,<1.29.3|>=1.30.0,<1.30.1|>=1.31.0,<1.31.1

Reported by:
GitHub, FriendsOfPHP/security-advisories