Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability - CVE-2021-31552 - Vulnerability Database
MediaWiki

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability - CVE-2021-31552

Medium
Reference: CVE-2021-31552
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-31552
Title: MediaWiki Exposure of Resource to Wrong Sphere Vulnerability
Overview:

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly executed certain rules related to blocking accounts after account creation. Such rules would allow for user accounts to be created while blocking only the IP address used to create an account (and not the user account itself). Such rules could also be used by a nefarious unprivileged user to catalog and enumerate any number of IP addresses related to these account creations.