CVE-2021-41798

6.1

MEDIUMCVSS v3

Published

October 11, 2021

CVSS v2

4.3 MEDIUM

Affected

9 projects

Assigned by

MITRE

Severity scale

010

Description

MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.

wikimedia/mediawiki

GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.

< 1.36.2NVD

mediawiki

NPMA JavaScript framework for the MediaWiki API.

< 1.36.2NVD

mediawiki

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

MediaWiki Syntax to HTML

< 1.36.2NVD

mediawiki

Crates.ioA MediaWiki client library

< 1.36.2NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 33, = 34, = 35NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 33, = 34, = 35NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 33, = 34, = 35NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 33, = 34, = 35NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 33, = 34, = 35NVD

Security Advisories

CVE-2021-41798

Description

More on this CVE