CVE-2021-41798: mediawiki mediawiki – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2021-41798

MÉDIO 6.1CVE-2021-41798 · Published 11/10/2021 · updated 17/06/2026

Em resumo

CVE-2021-41798 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta mediawiki (mediawiki).
Chance de exploração nos próximos 30 dias (EPSS): 1.4%, maior que 73.3% das vulnerabilidades.
Correção: atualize para 1.36.2 ou posterior.

Package	Affected versions	Patched versions
mediawiki mediawiki	`< 1.36.2`	`1.36.2`

Description

MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.

References

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJDYJQWT43GBD6GNQ4OW7JOZ6WQ6DZTN
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDBPECBWN6LWNSWIQMVXK6PP4YFEUYHA
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNEAI2T3Y65I55ZB6UE6RMC662RZTGRX
phabricator.wikimedia.org/T285515 · Exploit
security.gentoo.org/glsa/202305-24

Mais vulnerabilidades de mediawiki

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free