CVE-2021-31554 in AbuseFilter Extension

Riassunto

di MITRE • 22/04/2021

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks for certain automatically created MediaWiki user accounts, thus allowing nefarious users to remain unblocked.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 22/04/2021
• Divulgazione: 22/04/2021
• Moderazione: accettato
• Voce: VDB-173290
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 5.4 (NVD)
• EPSS: 0.00491
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-31554
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-31554
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-31554/