PT-2021-24243 · Mediawiki+1 · Mediawiki+1

Dylsss · Published 2021-12-20 · Updated 2024-03-06 · CVE-2021-45471

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.38

Description: The issue allows blocked IP addresses to edit EntitySchema items. This is a problem in MediaWiki where blocked users can still make changes to certain items.

Recommendations: For MediaWiki versions prior to 1.38, update to version 1.38 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2021-3561

ALT-PU-2022-1199

BIT-MEDIAWIKI-2021-45471

CVE-2021-45471

Affected Products

Alt Linux

Mediawiki

References · 12

• https://osv.dev/vulnerability/BIT-mediawiki-2021-45471 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7JNQA53K675TQBBJPZRAG5ZT6XES3IS · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-45471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-45471 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45471 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45471 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-45471 · Vendor Advisory
• https://gerrit.wikimedia.org/r/q/Iac86cf63bd014ef99e83dccfce9b8942e15d2bf9 · Note
• https://phabricator.wikimedia.org/T296578 · Note
• https://t.me/cvenotify/26402 · Telegram Post
• https://t.me/cvenotify/24869 · Telegram Post
• https://gerrit.wikimedia.org/r/q/Id9af124427bcd1e85301d2140a38bf47bbc5622c · Note