Name | CVE-2021-45471 |
Description | In MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
NOT-FOR-US: EntitySchema MediaWiki extension
https://gerrit.wikimedia.org/r/q/Iac86cf63bd014ef99e83dccfce9b8942e15d2bf9
https://gerrit.wikimedia.org/r/q/Id9af124427bcd1e85301d2140a38bf47bbc5622c
https://phabricator.wikimedia.org/T296578