CVE-2021-30155 - log back

CVE-2021-30155 edited at 09 Apr 2021 09:49:48
Description
- An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange did not sufficiently check whether a user can create pages.
+ n issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page.
References
https://phabricator.wikimedia.org/T270988
+ https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/3db31d9afd94f228af7410f57e0da025fec18793%5E%21/
CVE-2021-30155 edited at 08 Apr 2021 19:53:51
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Access restriction bypass
Description
+ An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange did not sufficiently check whether a user can create pages.
References
+ https://phabricator.wikimedia.org/T270988
CVE-2021-30155 created at 08 Apr 2021 19:41:44
Severity
+ Unknown
Remote
+ Unknown
Type
+ Unknown
Description
References
Notes