ByteOS Network

NVD Vulnerability Details :

CVE-2021-46146

Analyzed

Source-cve@mitre.org

Published At-10 Jan, 2022 | 14:11

Updated At-13 Jan, 2022 | 17:27

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The WikibaseMediaInfo component is vulnerable to XSS via the caption fields for a given media file.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

CPE Matches

Wikimedia Foundation

>>mediawiki>>Versions before 1.35.5(exclusive)

cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Wikimedia Foundation

>>mediawiki>>Versions from 1.36.0(inclusive) to 1.36.3(exclusive)

cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Wikimedia Foundation

>>mediawiki>>Versions from 1.37.0(inclusive) to 1.37.1(exclusive)

cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://gerrit.wikimedia.org/r/q/I58d37fb59f998f5bec4a018bf9da96a777f8ff78	cve@mitre.org	Third Party Advisory
https://phabricator.wikimedia.org/T293556	cve@mitre.org	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History