DeutschShown in its original language — a full translation is planned for a future version.
MediaWiki: Mehrere Schwachstellen
view advisory published 2021-09-30
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Cross Site Scripting Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-41801US | high8.8 | — | ||
The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be ru… | ||||
| CVE-2021-41800US | medium5.3 | — | ||
MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long ru… | ||||
| CVE-2021-41799US | high7.5 | — | ||
MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full… | ||||
| CVE-2021-41798US | medium6.1 | — | ||
MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page. | ||||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-2779 vom 2021-10-09external
- MediaWiki Announce Mailing List vom 2021-09-30external
- Gentoo Linux Security Advisory GLSA-202305-24 vom 2023-05-21external
- WID-SEC-W-2023-1260 - CSAF Versionself
- WID-SEC-2023-1260 - Portal Versionself
- Debian Security Advisory DSA-4979 vom 2021-10-04external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan