CVE-2021-29483

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada miraheze managewiki. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration variables set through the ManageWiki variable to all users. This has been patched by https://github.com/miraheze/ManageWiki/compare/99f3b2c8af18...befb83c66f5b.patch. If you are unable to patch set `$wgAPIListModules['wikiconfig'] = 'ApiQueryDisabled';` or remove private config as a workaround.

Rincian

Terbit di NVD

28 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/miraheze/ManageWiki/commit/befb83c66f5b643e174897ea41a8a46679b26304 patch · advisory pihak ketiga
• https://github.com/miraheze/ManageWiki/security/advisories/GHSA-jmc9-rv2f-g8vv mitigasi · patch · advisory pihak ketiga
• https://phabricator.miraheze.org/T7213 issue tracking · advisory pihak ketiga