CVE-2021-30156: Infoleak
Published Apr 9, 2021
·Updated
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Special:Contributions can leak that a "hidden" user exists.
Affected Software
4 affected components
MediaWiki<1.31.12
MediaWiki>=1.32.0<1.35.2
fedoraproject fedora=33
fedoraproject fedora=34
Remediation
Patch Available
Event History
Apr 9, 2021
CVE Published
via MITRE·06:10 AM
Data Sourced
via MITRE·06:10 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-30156?
CVE-2021-30156 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2021-30156?
To fix CVE-2021-30156, upgrade MediaWiki to version 1.35.2 or later.
3
Which versions of MediaWiki are affected by CVE-2021-30156?
CVE-2021-30156 affects MediaWiki versions before 1.31.12 and between 1.32.0 and 1.35.2.
4
Can CVE-2021-30156 affect Fedora users?
Yes, CVE-2021-30156 can affect Fedora versions 33 and 34 if they are running affected MediaWiki versions.
5
What does CVE-2021-30156 exploit?
CVE-2021-30156 can exploit the Special:Contributions feature to leak the existence of 'hidden' users.