CVE-2021-30155 log

Severity Medium
Remote Yes
Type Access restriction bypass
n issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page.
Group Package Affected Fixed Severity Status Ticket
AVG-1775 mediawiki 1.35.1-2 1.35.2-1 Medium Fixed