vulnerability
MediaWiki: Incorrect Default Permissions (CVE-2021-44858)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Dec 20, 2021 | Jan 4, 2022 | May 23, 2023 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Dec 20, 2021
Added
Jan 4, 2022
Modified
May 23, 2023
Description
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=edit&undo= followed by action=mcrundo and action=mcrrestore to view private pages on a private wiki that has at least one page set in $wgWhitelistRead.
Solution(s)
mediawiki-upgrade-1_35_5mediawiki-upgrade-1_36_3mediawiki-upgrade-1_37_1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.