NetSight
medium5.3

CVE-2021-44856

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1.

Impact

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value.

Affected products

VendorProductAffected versions
MediawikiMediawiki
before 1.35.5
from 1.36.0 before 1.36.3
Version 1.37.0

Weakness classification

References