The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time (due to the job queue backlog)
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DSA-4979-1 | mediawiki security update |
![]() |
EUVD-2021-28808 | The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time (due to the job queue backlog) |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-04T03:22:24.024Z
Reserved: 2021-09-29T00:00:00
Link: CVE-2021-41801

No data.

Status : Modified
Published: 2021-10-11T08:15:06.857
Modified: 2024-11-21T06:26:47.310
Link: CVE-2021-41801

No data.

No data.