Description
An issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki:Abusefilter-blocker message is invalid within the content language, the filter user falls back to the English version, but that English version could also be invalid on a wiki. This would result in a fatal error, and potentially fail to block or restrict a potentially nefarious user.
Remediation
References
Related Vulnerabilities
IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4661)
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.19)
ownCloud Incorrect Authorization Vulnerability (CVE-2021-35949)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3714)
WordPress Plugin Contact Form 7 Style Cross-Site Request Forgery (3.1.9)