CVE-2021-31554
First published: Thu Apr 22 2021(Updated: )
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks for certain automatically created MediaWiki user accounts, thus allowing nefarious users to remain unblocked.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MediaWiki MediaWiki | <=1.35.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-31554?
CVE-2021-31554 is a vulnerability found in the AbuseFilter extension for MediaWiki through 1.35.2.
How does CVE-2021-31554 impact MediaWiki?
CVE-2021-31554 allows nefarious users to remain unblocked in MediaWiki by improperly handling account blocks for certain automatically created user accounts.
What is the severity of CVE-2021-31554?
CVE-2021-31554 has a severity rating of 5.4, which is considered medium.
How can I fix CVE-2021-31554?
To fix CVE-2021-31554, update MediaWiki to version 1.35.3 or higher.
Where can I find more information about CVE-2021-31554?
You can find more information about CVE-2021-31554 in the references provided: [link1](https://gerrit.wikimedia.org/r/q/Ie1f4333d5b1c9d17fb2236fe38a31de427a4cc48), [link2](https://phabricator.wikimedia.org/T272244)
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/severity
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/mediawiki
- canonical/mediawiki mediawiki
- version/mediawiki mediawiki/1.35.2