PT-2021-23488 · Mediawiki+1 · Translate Extension+2

Published 2021-10-06 · Updated 2024-03-06 · CVE-2021-42049

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.36.2

Description An issue in the Translate extension allows oversighters to whitewash revisions by preventing them from undoing revisions or oversight on pages where they suppressed information, such as personally identifiable information (PII).

Recommendations For versions through 1.36.2, as a temporary workaround, consider restricting the use of the Translate extension until a patch is available.

Fix

Related Identifiers

ALT-PU-2021-3561

ALT-PU-2022-1199

BIT-MEDIAWIKI-2021-42049

CVE-2021-42049

Affected Products

Alt Linux

Mediawiki

Translate Extension

References · 5

• https://gerrit.wikimedia.org/r/q/I4d95220ef414337147235f7ebedc9b945c3348e3 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mediawiki-2021-42049 · Vendor Advisory
• https://phabricator.wikimedia.org/T286884 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-42049 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42049 · Security Note