Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv3

CVE-2021-30156

Published: 09/04/2021 Updated: 07/11/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Subscribe to Mediawiki

Vulnerability Summary

An issue exists in MediaWiki prior to 1.31.12 and 1.32.x up to and including 1.35.x prior to 1.35.2. Special:Contributions can leak that a "hidden" user exists.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mediawiki mediawiki

fedoraproject fedora 33

fedoraproject fedora 34

Vendor Advisories

Red Hat: CVE-2021-30156
An issue was discovered in MediaWiki before 13112 and 132x through 135x before 1352 Special:Contributions can leak that a "hidden" user exists ...
Arch Linux Issues:
An issue was discovered in MediaWiki on the master branch Special:Contributions can leak that a "hidden" user exists ...

References

CWE-200https://phabricator.wikimedia.org/T276306https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2021-30156
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4651CVE-2024-34255elevation of privilegeCVE-2024-25529CVE-2024-4671NULL pointer dereferenceCVE-2024-25527template injectionCVE-2008-0166
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook