VULNERABILITY INTELLIGENCE

CVE-2021-42049

CVSS score6.5 MEDIUM

EPSS probability1.03%

CISA KEVNot currently listed

Published2022-09-29

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

cve@mitre.org — Patch, Vendor Advisory
cve@mitre.org — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory