{"id":"CVE-2021-31546","aliases":["BIT-mediawiki-2021-31546","EUVD-2021-18443","GHSA-m6mr-cqmw-69c6"],"status":"published","title":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...","description":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00745,"percentile":0.55278,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-532"],"published":"2021-04-22T02:30:48Z","modified":"2026-10-24T10:30:18Z","fixes":[{"ecosystem":"Bitnami","package":"mediawiki","fixed_in":["1.35.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"mediawiki","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.35.3"}]}]}],"products":[{"vendor":"mediawiki","product":"mediawiki"}],"references":[{"url":"https://phabricator.wikimedia.org/T71617","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web","advisory"]},{"url":"https://gerrit.wikimedia.org/r/q/I38a0a24fa32ca7a052b6940864a32b3856e84553","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31546","tags":["web"]},{"url":"https://github.com/advisories/GHSA-m6mr-cqmw-69c6"}],"sources":{"cve":[{"id":"CVE-2021-31546","description":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.","status":"published","published":"2021-04-22T02:30:48Z","modified":"2024-08-03T23:03:33.347Z","updated_at":"2026-11-02T14:33:05.665371Z"}],"euvd":[{"id":"EUVD-2021-18443","description":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.","status":"published","published":"2021-04-22T02:30:48Z","modified":"2024-08-03T23:03:33Z","updated_at":"2026-11-03T03:24:38.977347Z"}],"ghsa":[{"id":"GHSA-m6mr-cqmw-69c6","title":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...","description":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.","status":"published","published":"2022-05-24T17:48:07Z","modified":"2023-01-27T05:03:00Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:42:09.126228Z"}],"nvd":[{"id":"CVE-2021-31546","description":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.","status":"published","published":"2021-04-22T03:15:07.97Z","modified":"2026-06-17T03:51:58.96Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:06:52.03307Z"}],"osv":[{"id":"CVE-2021-31546","description":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.","status":"published","published":"2021-04-22T03:15:07.97Z","modified":"2026-10-24T10:30:18.958220247Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:19.483607Z"},{"id":"BIT-mediawiki-2021-31546","description":"An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.","status":"published","published":"2024-03-06T11:12:24.973Z","modified":"2025-04-03T14:40:37.652Z","updated_at":"2026-11-02T15:28:33.072289Z"}]}}