critical9.8
CVE-2021-36128
An issue was discovered in the CentralAuth extension in MediaWiki through 1.36.
Impact
An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.36 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gerrit.wikimedia.org/r/q/I15d14c88a1e30df92c470bc191c4ee573172d4d1
- https://gerrit.wikimedia.org/r/q/I3e65690695313380c798b62edfda726b6e374f89
- https://phabricator.wikimedia.org/T281972
- https://gerrit.wikimedia.org/r/q/I15d14c88a1e30df92c470bc191c4ee573172d4d1
- https://gerrit.wikimedia.org/r/q/I3e65690695313380c798b62edfda726b6e374f89
- https://phabricator.wikimedia.org/T281972