CVE-2021-30152

4.3

MEDIUMCVSS v3

Published

April 9, 2021

CVSS v2

4 MEDIUM

Affected

9 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki API to "protect" a page, a user is currently able to protect to a higher level than they currently have permissions for.

wikimedia/mediawiki

GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.

>= 1.32.0, < 1.35.2, < 1.31.13NVD