CVE-2021-44855
CVE-2021-44855
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. There is Blind Stored XSS via a URL to the Upload Image feature.
CVSS 5.4 · Medium · EPSS 0.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Unknown
No fix published
mediawiki Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.35.5-1
Update to 1:1.35.5-1
mediawiki Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.35.5-1
Update to 1:1.35.5-1
mediawiki Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.35.5-1
Update to 1:1.35.5-1
mediawiki Ubuntu:18.04:LTS
- Versions
- 1:1.27.3-1
- 1:1.27.4-1
- 1:1.27.4-2
- 1:1.27.4-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
mediawiki Ubuntu:Pro:20.04:LTS
- Versions
- 1:1.31.2-1ubuntu1
- 1:1.31.5-1
- 1:1.31.5-1ubuntu1
- 1:1.31.5-2
- 1:1.31.5-3
- 1:1.31.5-3ubuntu1
- 1:1.31.6-1
- 1:1.31.7-1
- 1:1.31.7-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published