EPSS
Percentile
37.0%
mediawiki is vulnerable to privilege escalation. The vulnerability exists due to the ReplaceText continues performing actions even when the user no longer has the correct permission (such as by being blocked).
ReplaceText
lists.wikimedia.org/hyperkitty/list/[email protected]/thread/2IFS5CM2YV4VMSODPX3J2LFHKSEWVFV5/
phabricator.wikimedia.org/T279090
security-tracker.debian.org/tracker/CVE-2021-41801