BIT-mediawiki-2021-36126

vendorUSosv

view advisory published 2024-03-06Licence: per source

An issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki:Abusefilter-blocker message is invalid within the content language, the filter user falls back to the English version, but that English version could also be invalid on a wiki. This would result in a fatal error, and potentially fail to block or restrict a potentially nefarious user.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-36126US	critical9.8	1.20% (68th)	—	2021-07-02
An issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki:Abusefilter-blocker message is invalid within the content language, the filter user…

references

External citations — patches, advisories, analysis.

https://gerrit.wikimedia.org/r/q/I9e9f44b7663e810de70fb9ac7f6760f83dd4895bWEB
https://nvd.nist.gov/vuln/detail/CVE-2021-36126WEB
https://phabricator.wikimedia.org/T284364WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan