CVE-2021-45471: mediawiki mediawiki – CVSS 5.3 · Watchpost

← All vulnerabilities

CVE-2021-45471

中危 5.3CVE-2021-45471 · Published 24/12/2021 · updated 17/06/2026

要点

CVE-2021-45471 是影响 mediawiki (mediawiki) 的中危 (CVSS 5.3)漏洞。
未来 30 天内被利用的概率（EPSS）：1.2%，高于 69.4% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
mediawiki mediawiki	`≤ 1.37`	No fix yet

Description

In MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.

References

gerrit.wikimedia.org/r/q/Iac86cf63bd014ef99e83dccfce9b8942e15d2bf9 · Third Party Advisory
gerrit.wikimedia.org/r/q/Id9af124427bcd1e85301d2140a38bf47bbc5622c · Third Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7JNQA53K675TQBBJPZRAG5ZT6XES3IS
phabricator.wikimedia.org/T296578 · Third Party Advisory

mediawiki 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free