Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-42049

An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.

Published

2022-09-29T03:15:14.763

Last Modified

2024-11-21T06:27:08.443

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mediawiki	mediawiki	≤ 1.36.2	Yes

References

https://gerrit.wikimedia.org/r/q/I4d95220ef414337147235f7ebedc9b945c3348e3 Patch, Vendor Advisory ([email protected])
https://phabricator.wikimedia.org/T286884 Permissions Required, Vendor Advisory ([email protected])
https://gerrit.wikimedia.org/r/q/I4d95220ef414337147235f7ebedc9b945c3348e3 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://phabricator.wikimedia.org/T286884 Permissions Required, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)