NetSight
IP …
medium4.3

CVE-2021-30152

An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2.

Impact

An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki API to "protect" a page, a user is currently able to protect to a higher level than they currently have permissions for.

Affected products

VendorProductAffected versions
MediawikiMediawiki
before 1.31.13
from 1.32.0 before 1.35.2
DebianDebian Linux
Versions 9.0, 10.0
FedoraprojectFedora
Versions 33, 34

Weakness classification

CWE-269

References