CVE-2021-44854

MEDIUM 5.3CVE-2021-44854 · Published 26/12/2022 · updated 17/06/2026

In short

CVE-2021-44854 is a MEDIUM (CVSS 5.3) vulnerability affecting mediawiki (mediawiki).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.3% of all vulnerabilities.
Fix: update to 1.36.3, 1.35.5 or later.

Package	Affected versions	Patched versions
mediawiki mediawiki	`= 1.37.0≥ 1.36.0, < 1.36.3< 1.35.5`	`1.36.31.35.5`

Description

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.

References

phabricator.wikimedia.org/T292763 · Issue Tracking
security.gentoo.org/glsa/202305-24

More vulnerabilities in mediawiki

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mediawiki

= 1.37.0≥ 1.36.0, < 1.36.3< 1.35.5

1.36.31.35.5

More vulnerabilities in mediawiki

See all →