An issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki:Abusefilter-blocker message is invalid within the content language, the filter user falls back to the English version, but that English version could also be invalid on a wiki. This would result in a fatal error, and potentially fail to block or restrict a potentially nefarious user.
References
Link | Resource |
---|---|
https://gerrit.wikimedia.org/r/q/I9e9f44b7663e810de70fb9ac7f6760f83dd4895b | Patch Vendor Advisory |
https://phabricator.wikimedia.org/T284364 | Exploit Issue Tracking Patch Vendor Advisory |
Configurations
History
07 Jul 2021, 17:09
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://phabricator.wikimedia.org/T284364 - Exploit, Issue Tracking, Patch, Vendor Advisory | |
References | (MISC) https://gerrit.wikimedia.org/r/q/I9e9f44b7663e810de70fb9ac7f6760f83dd4895b - Patch, Vendor Advisory | |
CWE | NVD-CWE-Other | |
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
CPE | cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:* |
02 Jul 2021, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-07-02 13:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-36126
Mitre link : CVE-2021-36126
CVE.ORG link : CVE-2021-36126
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE