An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "1.35.5"
},
{
"introduced": "1.36.0"
},
{
"fixed": "1.36.3"
},
{
"introduced": "0"
},
{
"last_affected": "1.37.0-NA"
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-44856.json"
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.37.0-rc0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.37.0-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.37.0-rc2"
}
]
}
]