Description

An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.

Remediation

References

CVE-2021-42049

Related Vulnerabilities

WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.6.3)

WordPress Plugin Comment Rating Cross-Site Request Forgery (2.9.20)

WordPress Plugin FancyBox for WordPress Security Bypass (3.0.2)

phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-6614)

WordPress Plugin Simply Poll SQL Injection (1.4.1)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CVE-2021-42049