Description

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.

Remediation

References

CVE-2021-31546

Related Vulnerabilities

WordPress Plugin WP BaiDu Submit Cross-Site Scripting (1.2.1)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1648)

Oracle Database Server CVE-2010-3590 Vulnerability (CVE-2010-3590)

WordPress Plugin Slideshow Information Disclosure (2.2.21)

WordPress Plugin Two Factor Authentication Cross-Site Request Forgery (1.3.12)

Severity

Medium

Classification

CVE-2021-31546 CWE-200 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities