CVE-2021-31556: Critical severity mediawiki vulnerability
Published Aug 12, 2021
·Updated
An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. MWOAuthConsumerSubmitControl.php does not ensure that the length of an RSA key will fit in a MySQL blob.
Affected Software
4 affected components
MediaWiki<=1.35.2
fedoraproject fedora=33
fedoraproject fedora=34
fedoraproject fedora=35
Remediation
Event History
Aug 12, 2021
CVE Published
via MITRE·09:38 PM
Data Sourced
via MITRE·09:38 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-31556?
CVE-2021-31556 is classified as a medium severity vulnerability due to its potential impact on RSA key storage.
2
How do I fix CVE-2021-31556?
To fix CVE-2021-31556, update to MediaWiki version 1.35.2 or later, as well as the relevant Fedora packages.
3
What causes CVE-2021-31556?
CVE-2021-31556 is caused by the MWOAuthConsumerSubmitControl.php not enforcing proper length limits for RSA keys in MySQL.
4
What software is affected by CVE-2021-31556?
CVE-2021-31556 affects MediaWiki versions up to and including 1.35.2 and specific versions of Fedora.
5
Can CVE-2021-31556 be exploited remotely?
Yes, CVE-2021-31556 can potentially be exploited remotely if an attacker is able to manipulate RSA key submissions.