Packagist/mediawiki/core CVE-2021-41800: medium 5.3, EPSS 1.81%

MediaWiki allows a denial of service

Action: Upgrade mediawiki/core to 1.36.2 or later.

composer require mediawiki/core:1.36.2

Affected

Fixed versions

Sources

• osv: GHSA-c8wv-qwwc-6j73
• https://nvd.nist.gov/vuln/detail/CVE-2021-41800
• https://github.com/wikimedia/mediawiki/commit/781caf83dba90c18349f930bbaaa0e89f003f874
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CJDYJQWT43GBD6GNQ4OW7JOZ6WQ6DZTN
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDBPECBWN6LWNSWIQMVXK6PP4YFEUYHA
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNEAI2T3Y65I55ZB6UE6RMC662RZTGRX
• https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/2IFS5CM2YV4VMSODPX3J2LFHKSEWVFV5
• https://phabricator.wikimedia.org/T284419
• https://security.gentoo.org/glsa/202305-24

CVE-2021-41800 · published 2022-05-24T19:17:14Z · modified 2024-02-20T05:23:07.235813Z · JSON