CVE-2021-41801

The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control

published October 11, 2021

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time (due to the job queue backlog)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01161 · 66.9th percentile
Published
2021-10-11T07:40Z
EPSS history
Timeline
  • 11 OCT 07:40Z
    The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control
    cvelistv5