CVE-2021-31553

Katalog CVE

CVSS 6.5 · Medium EPSS 1,4%

Kerentanan Unquoted Search Path or Element pada mediawiki. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki usernames with trailing whitespace could be stored in the cu_log database table such that denial of service occurred for certain CheckUser extension pages and functionality. For example, the attacker could turn off Special:CheckUserLog and thus interfere with usage tracking.

Rincian

Terbit di NVD

22 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-428: Unquoted Search Path or Element

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/666963 issue tracking · advisory pihak ketiga
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/666964 issue tracking · advisory pihak ketiga
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667023 issue tracking · advisory pihak ketiga
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667024 issue tracking · advisory pihak ketiga
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667025 issue tracking · advisory pihak ketiga
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667027 issue tracking · advisory pihak ketiga
• https://phabricator.wikimedia.org/T275669 advisory pihak ketiga