Launchpad CVE tracker

CVE 2021-44854

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.

Related bugs and status

CVE-2021-44854 (Candidate) is related to these bugs:

Bug #1955352: Vulnerable to information disclosure through various actions

		In	Importance	Status
1955352	Vulnerable to information disclosure through various actions	mediawiki (Ubuntu)	Medium	Fix Released
1955352	Vulnerable to information disclosure through various actions	mediawiki (Ubuntu Jammy)	Medium	Fix Released
1955352	Vulnerable to information disclosure through various actions	mediawiki (Ubuntu Hirsute)	Medium	Won't Fix
1955352	Vulnerable to information disclosure through various actions	mediawiki (Ubuntu Bionic)	Medium	In Progress
1955352	Vulnerable to information disclosure through various actions	mediawiki (Ubuntu Impish)	Medium	Won't Fix
1955352	Vulnerable to information disclosure through various actions	mediawiki (Ubuntu Focal)	Medium	In Progress

See the

CVE page on Mitre.org for more details.

References

MISC: https://phabricator.wi...
GENTOO: GLSA-202305-24

Launchpad.net

CVE 2021-44854

Related bugs and status

Related bugs

References