Vulnerability · Published Oct 6, 2021 · Assigned by mitre
CVE-2021-42045
Medium 5.4
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS NVD)5.4Medium
Exploit odds (30 days)0.7%top 48.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing their User-Agent HTTP header and submitting a vote.
Affected products (as reported)
References
- https://phabricator.wikimedia.org/T289385 x_refsource_MISC
- https://gerrit.wikimedia.org/r/q/I4f04083cd00884d3b85245460774c81c7639a578 x_refsource_MISC