vulnerability
FreeBSD: VID-0a50bb48-625f-11ec-a1fb-080027cb2f6f (CVE-2021-44857): mediawiki -- multiple vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:P/A:N) | Dec 21, 2021 | Nov 4, 2022 | Jun 15, 2026 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Dec 21, 2021
Added
Nov 4, 2022
Modified
Jun 15, 2026
Description
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=mcrundo followed by action=mcrrestore to replace the content of any arbitrary page (that the user doesn't have edit rights for). This applies to any public wiki, or a private wiki that has at least one page set in $wgWhitelistRead.
Solutions
freebsd-upgrade-package-mediawiki135freebsd-upgrade-package-mediawiki136freebsd-upgrade-package-mediawiki137
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.