Versio.io

CVE-2021-21275

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 26-01-2021 12:15
Last modified: - 26-04-2022 04:45
Total changes: - 7

Description

The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit tokens.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Low
Attack complexity
Network
Attack vector
None
Availability
None
Confidentiality
Low
Integrity
None
Privileges required
Unchanged
Scope
Required
User interaction
4.3
Base score
2.8
1.4
Exploitability score
Impact score
 

Verification logic

OR
OR
vendor=report_project AND product=report AND target_software=mediawiki AND versionEndExcluding=2021-01-21
OR
vendor=oracle AND product=communications_cloud_native_core_network_slice_selection_function AND version=1.2.1
vendor=oracle AND product=communications_pricing_design_center AND version=12.0.0.4.0
vendor=oracle AND product=communications_pricing_design_center AND version=12.0.0.5.0
 

Reference

 


Keywords

NVD

 

CVE-2021-21275

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.