Description

An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.

Remediation

References

CVE-2021-42049

Related Vulnerabilities

WordPress Plugin Blog social sharing component Cross-Site Scripting (1.4.4)

Internet Information Services Other Vulnerability (CVE-1999-1223)

WordPress Plugin Essential Real Estate Cross-Site Scripting (1.7.1)

Atlassian Jira Deserialization of Untrusted Data Vulnerability (CVE-2017-5983)

TCExam Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5744)

Severity

Medium

Classification

CVE-2021-42049 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities