CVE-2021-42049

MEDIUM

MediaWiki <1.36.2 - Info Disclosure

Title source: llm
STIX 2.1

Description

An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.

References (2)

Core 2
Core References
Permissions Required, Vendor Advisory x_refsource_misc
https://phabricator.wikimedia.org/T286884

Scores

CVSS v3 6.5
EPSS 0.0033
EPSS Percentile 56.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (1)
mediawiki/mediawiki < 1.36.2
Published Sep 29, 2022
Tracked Since Feb 18, 2026