CVE-2021-31554

Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.35.2 AbuseFilter extension for MediaWiki versions through 1.35.2

Description An issue in the AbuseFilter extension for MediaWiki improperly handled account blocks for certain automatically created MediaWiki user accounts. This allowed malicious users to remain unblocked.

Recommendations For MediaWiki versions through 1.35.2, update to a version that includes a fix for the issue in the AbuseFilter extension. For the AbuseFilter extension for MediaWiki versions through 1.35.2, update the extension to a version that properly handles account blocks for automatically created user accounts.