CVE-2021-42049 : An issue was discovered in the Translate extension in MediaWiki through 1.36.2.

An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.

Published 2022-09-29 03:15:15

Updated 2022-09-30 16:58:00

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2021-42049

Mediawiki » Mediawiki
Versions up to, including, (<=) 1.36.2
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-42049

EPSS FAQ

0.81%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 72 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-42049

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2021-42049

https://gerrit.wikimedia.org/r/q/I4d95220ef414337147235f7ebedc9b945c3348e3

I4d95220ef414337147235f7ebedc9b945c3348e3 · Gerrit Code Review
Patch;Vendor Advisory
https://phabricator.wikimedia.org/T286884

Login
Permissions Required;Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-42049

Products affected by CVE-2021-42049

Exploit prediction scoring system (EPSS) score for CVE-2021-42049

CVSS scores for CVE-2021-42049

References for CVE-2021-42049