Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-36129
4.3
MEDIUMCVSS v3
Published
July 2, 2021
CVSS v2
4 MEDIUM
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups Action API module does not validate the parameter for aggregategroup when action=remove is set, thus allowing users with the translate-manage right to silently delete various groups' metadata.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.<= 1.36NVD
NPM
Crates.io