vulnerability

MediaWiki: Information Exposure (CVE-2021-45038)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Dec 17, 2021
Added
Dec 23, 2021
Modified
Mar 7, 2024

Description

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=rollback query, attackers can view private wiki contents.

Solutions

mediawiki-upgrade-1_35_5mediawiki-upgrade-1_36_3mediawiki-upgrade-1_37_1
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.