Mediawiki · Mediawiki · CVE-2021-31552
**Name of the Vulnerable Software and Affected Versions**
MediaWiki versions through 1.35.2
**Description**
An issue in the AbuseFilter extension for MediaWiki allows certain rules related to blocking accounts after account creation to be executed incorrectly. This could enable user accounts to be created while only blocking the IP address used for creation, rather than the account itself. Additionally, a malicious, unprivileged user could utilize such rules to catalog and enumerate numerous IP addresses associated with account creations.
**Recommendations**
For MediaWiki versions through 1.35.2, update to a version that includes a fix for this issue to prevent incorrect execution of AbuseFilter rules.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.