CVE-2021-41798

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-41798

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41798.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-41798

Aliases

BIT-mediawiki-2021-41798

Downstream

DEBIAN-CVE-2021-41798

DLA-2779-1

DSA-4979-1

UBUNTU-CVE-2021-41798

Related

MGASA-2021-0477

Published

2021-10-11T08:15:06.647Z

Modified

2025-11-20T11:55:20.002814Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.

References

Affected packages

Git / github.com/wikimedia/mediawiki

Affected ranges

Type: GIT
Repo: https://github.com/wikimedia/mediawiki
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

f65f9d6971578b301ef9fc915a729e6a13266a5e

Affected versions

1.*

1.1.0

1.3.0beta1

1.36.0

1.36.0-rc.0

1.36.1

1.5.0alpha1

1.5.0alpha2

1.5.0beta1

1.5.0beta2

1.5.0beta3

1.5.0beta4

1.6.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41798.json"