VULNERABILITY INTELLIGENCE

CVE-2021-36127

CVSS score4.3 MEDIUM

EPSS probability0.74%

CISA KEVNot currently listed

Published2021-07-02

Last modified2026-06-17

Description

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalUserRights page provided search results which, for a suppressed MediaWiki user, were different than for any other user, thus easily disclosing suppressed accounts (which are supposed to be completely hidden).