UpHeron
All vulnerabilities

Servers and applications

CVE-2021-41801

The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time (due to the job queue backlog)

Severity
High 8.8
Published
11 Oct 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.31.16, 1.35.4, 1.36.2
Sources
NVD

Affected software

SoftwareAffected versions
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki
  • Every version before 1.31.16
  • From 1.35.0 before 1.35.4
  • From 1.36.0 before 1.36.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41801
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41801