deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-21642
Published: 2021-04-21
Description: Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2021/04/21/2; https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204; http://www.openwall.com/lists/oss-security/2021/04/21/2
CVE: CVE-2021-21643
Published: 2021-04-21
Description: Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2021/04/21/2; https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254; http://www.openwall.com/lists/oss-security/2021/04/21/2
CVE: CVE-2021-21644
Published: 2021-04-21
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2021/04/21/2; https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2202; http://www.openwall.com/lists/oss-security/2021/04/21/2
CVE: CVE-2021-21645
Published: 2021-04-21
Description: Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.
CVSS Score: 4.3 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2021/04/21/2; https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2203; http://www.openwall.com/lists/oss-security/2021/04/21/2
CVE: CVE-2021-21646
Published: 2021-04-21
Description: Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/04/21/2; https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2311; http://www.openwall.com/lists/oss-security/2021/04/21/2
CVE: CVE-2021-21647
Published: 2021-04-21
Description: Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.
CVSS Score: 4.3 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2021/04/21/2; https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2309; http://www.openwall.com/lists/oss-security/2021/04/21/2
CVE: CVE-2020-35979
Published: 2021-04-21
Description: An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gp_rtp_builder_do_avc() in ietf/rtp_pck_mpeg4.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/b15020f54aff24aaeb64b80771472be8e64a7adc; https://github.com/gpac/gpac/issues/1662; https://github.com/gpac/gpac/commit/b15020f54aff24aaeb64b80771472be8e64a7adc
CVE: CVE-2020-35980
Published: 2021-04-21
Description: An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gf_isom_box_del() in isomedia/box_funcs.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/gpac/gpac/commit/5aba27604d957e960d8069d85ccaf868f8a7b07a; https://github.com/gpac/gpac/issues/1661; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2020-35981
Published: 2021-04-21
Description: An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters() in isomedia/isom_store.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/dae9900580a[PII_REDACTED]cd[PII_REDACTED]1edb11b; https://github.com/gpac/gpac/issues/1659; https://github.com/gpac/gpac/commit/dae9900580a[PII_REDACTED]cd[PII_REDACTED]1edb11b
CVE: CVE-2020-35982
Published: 2021-04-21
Description: An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hinter_track_finalize() in media_tools/isom_hinter.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/a4eb[PII_REDACTED]59cae54b59faec9e2f14c5a619; https://github.com/gpac/gpac/issues/1660; https://github.com/gpac/gpac/commit/a4eb[PII_REDACTED]59cae54b59faec9e2f14c5a619
CVE: CVE-2021-30031
Published: 2021-04-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-30139
Published: 2021-04-21
Description: In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741; https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606; https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741
CVE: CVE-2021-31327
Published: 2021-04-21
Description: Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/remoteclinic/RemoteClinic/issues/14; https://github.com/remoteclinic/RemoteClinic/issues/14
CVE: CVE-2021-31329
Published: 2021-04-21
Description: Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/remoteclinic/RemoteClinic/issues/16; https://github.com/remoteclinic/RemoteClinic/issues/16
CVE: CVE-2020-23907
Published: 2021-04-21
Description: An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap buffer overflow. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/avast/retdec/commit/517298bafaaff0a8e3dd60dd055a67c41b545807; https://github.com/avast/retdec/issues/637; https://github.com/avast/retdec/commit/517298bafaaff0a8e3dd60dd055a67c41b545807
CVE: CVE-2020-23912
Published: 2021-04-21
Description: An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4_StszAtom::GetSampleSize() located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/540; https://github.com/axiomatic-systems/Bento4/issues/540
CVE: CVE-2020-23914
Published: 2021-04-21
Description: An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/yhirose/cpp-peglib/commit/0061f393de54cf0326621c079dc2988336d1ebb3; https://github.com/yhirose/cpp-peglib/issues/121; https://github.com/yhirose/cpp-peglib/commit/0061f393de54cf0326621c079dc2988336d1ebb3
CVE: CVE-2020-23915
Published: 2021-04-21
Description: An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_escape_sequence() in peglib.h has a heap-based buffer over-read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/126.html; https://github.com/yhirose/cpp-peglib/commit/b3b29ce8f3acf3a32733d930105a17d7b0ba347e; https://github.com/yhirose/cpp-peglib/issues/122
CVE: CVE-2020-23921
Published: 2021-04-21
Description: An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/126.html; https://github.com/Samuel-Tyler/fast_ber/issues/30; https://cwe.mitre.org/data/definitions/126.html
CVE: CVE-2020-23922
Published: 2021-04-21
Description: An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/126.html; https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E; https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
CVE: CVE-2020-23928
Published: 2021-04-21
Description: An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/126.html; https://github.com/gpac/gpac/commit/8e05648d6b4459facbc783025c5c42d301fef5c3; https://github.com/gpac/gpac/issues/1568
CVE: CVE-2020-23930
Published: 2021-04-21
Description: An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function nhmldump_send_header located in write_nhml.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/9eeac00b38348c664dfeae2525bba0cf1bc32349; https://github.com/gpac/gpac/issues/1565; https://github.com/gpac/gpac/commit/9eeac00b38348c664dfeae2525bba0cf1bc32349
CVE: CVE-2020-23931
Published: 2021-04-21
Description: An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/126.html; https://github.com/gpac/gpac/commit/093283e727f[PII_REDACTED]80609e687cd4778e0d1; https://github.com/gpac/gpac/issues/1564
CVE: CVE-2020-23932
Published: 2021-04-21
Description: An issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function dump_isom_sdp located in filedump.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/ce01bd15f711d4575b7424b54b3a395ec64c1784; https://github.com/gpac/gpac/issues/1566; https://github.com/gpac/gpac/commit/ce01bd15f711d4575b7424b54b3a395ec64c1784
CVE: CVE-2021-28167
Published: 2021-04-21
Description: In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static methods or access static members without running the class initialization method, and may allow a user to observe uninitialized values.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-909, CWE-909
References: https://github.com/eclipse/openj9/issues/12016; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/eclipse/openj9/issues/12016
CVE: CVE-2020-28973
Published: 2021-04-21
Description: The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://eye.security/en/blog/breaking-abus-secvest-internet-connected-alarm-systems-cve-2020-28973; https://eye.security/en/blog/breaking-abus-secvest-internet-connected-alarm-systems-cve-2020-28973
CVE: CVE-2021-29456
Published: 2021-04-21
Description: Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal. In versions 4.27.4 and earlier, utilizing a HTTP query parameter an attacker is able to redirect users from the web application to any domain, including potentially malicious sites. This security issue does not directly impact the security of the web application itself. As a workaround, one can use a reverse proxy to strip the query parameter from the affected endpoint. There is a patch for version 4.28.0.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-601
References: https://github.com/authelia/authelia/security/advisories/GHSA-36f2-fcrx-fp4j; https://github.com/authelia/authelia/security/advisories/GHSA-36f2-fcrx-fp4j
CVE: CVE-2021-31523
Published: 2021-04-21
Description: The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2021/04/21/3; https://www.openwall.com/lists/oss-security/2021/04/17/1; http://www.openwall.com/lists/oss-security/2021/04/21/3
CVE: CVE-2020-36324
Published: 2021-04-21
Description: Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wikimedia/analytics-quarry-web/commit/4b7e1d6a3a52ec6cf826a971135a38b0f74785d2; https://quarry.wmflabs.org/; https://github.com/wikimedia/analytics-quarry-web/commit/4b7e1d6a3a52ec6cf826a971135a38b0f74785d2
CVE: CVE-2021-21426
Published: 2021-04-21
Description: Magento-lts is a long-term support alternative to Magento Community Edition (CE). In magento-lts versions 19.4.12 and prior and 20.0.8 and prior, there is a vulnerability caused by the unsecured deserialization of an object. A patch in versions 19.4.13 and 20.0.9 was back ported from Zend Framework 3. The vulnerability was assigned CVE-2021-3007 in Zend Framework.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/OpenMage/magento-lts/security/advisories/GHSA-m496-x567-f98c; https://github.com/OpenMage/magento-lts/security/advisories/GHSA-m496-x567-f98c
CVE: CVE-2021-21427
Published: 2021-04-21
Description: Magento-lts is a long-term support alternative to Magento Community Edition (CE). A vulnerability in magento-lts versions before 19.4.13 and 20.0.9 potentially allows an administrator unauthorized access to restricted resources. This is a backport of CVE-2021-21024. The vulnerability is patched in versions 19.4.13 and 20.0.9.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://github.com/OpenMage/magento-lts/security/advisories/GHSA-fvrf-9428-527m; https://github.com/OpenMage/magento-lts/security/advisories/GHSA-fvrf-9428-527m
CVE: CVE-2020-27568
Published: 2021-04-21
Description: Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://docs.aviatrix.com/HowTos/security_bulletin_article.html#insecure-file-permissions; https://docs.aviatrix.com/HowTos/security_bulletin_article.html#insecure-file-permissions
CVE: CVE-2020-27569
Published: 2021-04-21
Description: Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-abitrary-file-write; https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-abitrary-file-write
CVE: CVE-2021-1074
Published: 2021-04-21
Description: NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. Such an attack may lead to code execution, escalation of privileges, denial of service, and information disclosure.
CVSS Score: 7.3 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5172; https://nvidia.custhelp.com/app/answers/detail/a_id/5172
CVE: CVE-2021-1075
Published: 2021-04-21
Description: NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.
CVSS Score: 7.3 (HIGH)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5172; https://nvidia.custhelp.com/app/answers/detail/a_id/5172
CVE: CVE-2021-1076
Published: 2021-04-21
Description: NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys or nvidia.ko) where improper access control may lead to denial of service, information disclosure, or data corruption.
CVSS Score: 6.6 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html; https://nvidia.custhelp.com/app/answers/detail/a_id/5172; https://security.gentoo.org/glsa/202310-02
CVE: CVE-2021-1077
Published: 2021-04-21
Description: NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-404
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5172; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5172
CVE: CVE-2021-1078
Published: 2021-04-21
Description: NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sys) where a NULL pointer dereference may lead to system crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5172; https://nvidia.custhelp.com/app/answers/detail/a_id/5172
CVE: CVE-2021-29467
Published: 2021-04-22
Description: Wrongthink is an encrypted peer-to-peer chat program. A user could check their fingerprint into the service and enter a script to run arbitrary JavaScript on the site. No workarounds exist, but a patch exists in version 2.4.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://github.com/birb-digital/wrongthink/security/advisories/GHSA-529v-f2gf-62w9; https://github.com/birb-digital/wrongthink/security/advisories/GHSA-529v-f2gf-62w9
CVE: CVE-2021-29465
Published: 2021-04-22
Description: Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files on the system. As a workaround, bot maintainers can edit their `setting.py` file then add `<` and `>` into the `RCE` variable inside of it to fix the issue without an update. The vulnerability is patched in version 0.0.4.
CVSS Score: 8.3 (HIGH)
CWE: CWE-94, CWE-78
References: https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-6pp2-rpj3-jcjx; https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-6pp2-rpj3-jcjx
CVE: CVE-2021-29466
Published: 2021-04-22
Description: Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important information. As a workaround, a bot maintainer can locate the file `app.py` and add `.replace('..', '')` into the `Path` variable inside of the `recon` function. The vulnerability is patched in version 0.0.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-24, CWE-22
References: https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-p2pw-8xwf-879g; https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-p2pw-8xwf-879g
CVE: CVE-2021-31545
Published: 2021-04-22
Description: An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The page_recent_contributors leaked the existence of certain deleted MediaWiki usernames, related to rev_deleted.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://gerrit.wikimedia.org/r/q/I8d5ed9ca84282ee50832035af86123633fc88293; https://phabricator.wikimedia.org/T71367; https://gerrit.wikimedia.org/r/q/I8d5ed9ca84282ee50832035af86123633fc88293
CVE: CVE-2021-31546
Published: 2021-04-22
Description: An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: https://gerrit.wikimedia.org/r/q/I38a0a24fa32ca7a052b6940864a32b3856e84553; https://phabricator.wikimedia.org/T71617; https://gerrit.wikimedia.org/r/q/I38a0a24fa32ca7a052b6940864a32b3856e84553
CVE: CVE-2021-31547
Published: 2021-04-22
Description: An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its AbuseFilterCheckMatch API reveals suppressed edits and usernames to unprivileged users through the iteration of crafted AbuseFilter rules.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://gerrit.wikimedia.org/r/q/I3f7dbd8b873d411e37c8c3aac2339bf5ec36907d; https://gerrit.wikimedia.org/r/q/I4900b1be73323599d74e3164447f81eded094d75; https://phabricator.wikimedia.org/T223654
CVE: CVE-2021-31548
Published: 2021-04-22
Description: An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. A MediaWiki user who is partially blocked or was unsuccessfully blocked could bypass AbuseFilter and have their edits completed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://gerrit.wikimedia.org/r/q/Ifac795125927d584a31d95e1b4c4241eef860fa1; https://phabricator.wikimedia.org/T272333; https://gerrit.wikimedia.org/r/q/Ifac795125927d584a31d95e1b4c4241eef860fa1
CVE: CVE-2021-31549
Published: 2021-04-22
Description: An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The Special:AbuseFilter/examine form allowed for the disclosure of suppressed MediaWiki usernames to unprivileged users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://gerrit.wikimedia.org/r/q/I6063c02fa261c4cc0e6dbbb2db4e111eb85912c2; https://gerrit.wikimedia.org/r/q/I71a6d521bd12931ce60eec4d2dc35af19146000f; https://phabricator.wikimedia.org/T274152
CVE: CVE-2021-31550
Published: 2021-04-22
Description: An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor could introduce XSS payloads into various layers.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Commentbox/+/651934/; https://phabricator.wikimedia.org/T270767; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Commentbox/+/651934/
CVE: CVE-2021-31551
Published: 2021-04-22
Description: An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads for Token-related query parameters allowed for XSS on certain PageForms-managed MediaWiki pages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/I20b63bd38779d2ccbe2d86f9879df85ca3b685f6; https://gerrit.wikimedia.org/r/q/I5e0abbc2f80e6bda255b3b32a4df39a7fe7d3793; https://gerrit.wikimedia.org/r/q/Ibe68b070ee791cd0c8e7f50eb04ac4e066b1512c