p PatchFirst

CVE-2021-44854

CVE-2021-44854

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.

CVSS 5.3 · Medium · EPSS 0.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Unknown

    No fix published

  • mediawiki Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.35.5-1

    Update to 1:1.35.5-1

  • mediawiki Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.35.5-1

    Update to 1:1.35.5-1

  • mediawiki Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.35.5-1

    Update to 1:1.35.5-1

  • mediawiki Ubuntu:18.04:LTS

    Versions
    • 1:1.27.3-1
    • 1:1.27.4-1
    • 1:1.27.4-2
    • 1:1.27.4-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mediawiki Ubuntu:Pro:20.04:LTS

    Versions
    • 1:1.31.2-1ubuntu1
    • 1:1.31.5-1
    • 1:1.31.5-1ubuntu1
    • 1:1.31.5-2
    • 1:1.31.5-3
    • 1:1.31.5-3ubuntu1
    • 1:1.31.6-1
    • 1:1.31.7-1
    • 1:1.31.7-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →