vulnerability
FreeBSD: VID-0A50BB48-625F-11EC-A1FB-080027CB2F6F (CVE-2021-44857): mediawiki -- multiple vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:P/A:N) | Dec 1, 2021 | Nov 4, 2022 | Nov 4, 2022 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Dec 1, 2021
Added
Nov 4, 2022
Modified
Nov 4, 2022
Description
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=mcrundo followed by action=mcrrestore to replace the content of any arbitrary page (that the user doesn't have edit rights for). This applies to any public wiki, or a private wiki that has at least one page set in $wgWhitelistRead.
Solution(s)
freebsd-upgrade-package-mediawiki135freebsd-upgrade-package-mediawiki136freebsd-upgrade-package-mediawiki137
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.