PT-2021-19418

CVE-2021-31548

·

Published

2021-04-22

·

Updated

2024-03-06

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.35.2
Description An issue was discovered in the AbuseFilter extension for MediaWiki, allowing a MediaWiki user who is partially blocked or was unsuccessfully blocked to bypass AbuseFilter and have their edits completed.
Recommendations For versions through 1.35.2, update to a version that contains a fix for this issue to prevent users from bypassing AbuseFilter.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-863: Incorrect Authorization
Related identifiers
CVE-2021-31548
ALT-PU-2021-1991
ALT-PU-2021-2091
BIT-MEDIAWIKI-2021-31548
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com