CVE-2021-45473: XSS
Published Dec 24, 2021
·Updated
In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL (aka a page-information sidebar).
Affected Software
2 affected components
MediaWiki<=1.3.7
fedoraproject fedora=35
Event History
Dec 24, 2021
CVE Published
via MITRE·01:03 AM
Data Sourced
via MITRE·01:03 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-45473?
CVE-2021-45473 has a moderate severity rating due to the potential for XSS attacks.
2
How do I fix CVE-2021-45473?
To fix CVE-2021-45473, you should upgrade to MediaWiki versions later than 1.37.
3
What software is affected by CVE-2021-45473?
CVE-2021-45473 affects MediaWiki versions up to 1.37 and Fedora 35.
4
What type of vulnerability is CVE-2021-45473?
CVE-2021-45473 is an XSS (Cross-Site Scripting) vulnerability.
5
When was CVE-2021-45473 disclosed?
CVE-2021-45473 was disclosed in late 2021 along with the release of MediaWiki 1.37.