p PatchFirst

CVE-2021-30153

CVE-2021-30153

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35.2. . When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden, user, VisualEditor will disclose that the user exists. (It shouldn't because they are hidden.) This is related to ApiVisualEditor.

CVSS 4.3 · Medium · EPSS 0.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • mediawiki Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.35.2-1

    Update to 1:1.35.2-1

  • mediawiki Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.35.2-1

    Update to 1:1.35.2-1

  • mediawiki Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.35.2-1

    Update to 1:1.35.2-1

Original sources

Check your server →