Vulnerabilities > CVE-2021-36128 - Improper Handling of Exceptional Conditions vulnerability in Mediawiki

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
mediawiki
CWE-755

Summary

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented.

Vulnerable Configurations

Part Description Count
Application
Mediawiki
384