CVE-2021-45038

Опубликовано: 17 дек. 2021

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=rollback query, attackers can view private wiki contents.

Ссылки

https://phabricator.wikimedia.org/T297574
Third Party Advisory
https://security.gentoo.org/glsa/202305-24
https://www.mediawiki.org/wiki/2021-12_security_release/FAQ
Vendor Advisory
https://phabricator.wikimedia.org/T297574
Third Party Advisory
https://security.gentoo.org/glsa/202305-24
https://www.mediawiki.org/wiki/2021-12_security_release/FAQ
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Версия до 1.35.5 (исключая)

cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Версия от 1.36.0 (включая) до 1.36.3 (исключая)

cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Версия от 1.37.0 (включая) до 1.37.1 (исключая)

EPSS

Процентиль: 60%

0.00402

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2021-45038

CVSS3: 5.3

ubuntu

около 4 лет назад

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=rollback query, attackers can view private wiki contents.

CVE-2021-45038

CVSS3: 5.3

redhat

около 4 лет назад

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=rollback query, attackers can view private wiki contents.

CVE-2021-45038

CVSS3: 5.3

debian

около 4 лет назад

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36 ...

GHSA-8rcg-5g7w-gw95

CVSS3: 5.3

github

около 4 лет назад

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=rollback query, attackers can view private wiki contents.

EPSS

Процентиль: 60%

0.00402

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200