CVE-2021-30155 PUBLISHED CVSS 4.300000190734863 MEDIUM

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page.

EPSS 0.45% · 63.3th percentile

Risk Scores

CVSS v3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.45%
63.3th percentile

Affected Products

VendorProductVersions
mediawikimediawiki0, 1.32.0
n/an/an/a
fedoraprojectfedora33, 34
debiandebian_linux9.0, 10.0

Timeline

References

Open in Interactive Console →