Description

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented.

Remediation

References

CVE-2021-36128

Related Vulnerabilities

WordPress Plugin Locations Cross-Site Request Forgery (3.2.1)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17531)

WordPress Plugin Mingle Forum SQL Injection and Security Bypass Vulnerabilities (1.0.26)

WordPress Plugin Viper's Video Quicktags Unspecified Vulnerability (6.4.4)

Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2003-1567)

Severity

Critical

Classification

CVE-2021-36128 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities