CVE-2021-42049

Published: Sep 29, 2022Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.

Affected (1)

Products: Mediawiki: Mediawiki

Mediawiki

1 product

Mediawiki

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Up to 1.36.2

References (4)

https://gerrit.wikimedia.org/r/q/I4d95220ef414337147235f7ebedc9b945c3348e3

Source: cve@mitre.org

PatchVendor Advisory

https://phabricator.wikimedia.org/T286884

Source: cve@mitre.org

Permissions RequiredVendor Advisory

https://gerrit.wikimedia.org/r/q/I4d95220ef414337147235f7ebedc9b945c3348e3

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://phabricator.wikimedia.org/T286884

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredVendor Advisory

Timeline

No history available yet.