CVE-2021-36128

Critical

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are…

mitre·CWE-755·Published 2021-07-02

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

162 chars

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented.

NVDen

162 chars

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented.

Se ha detectado un problema en la extensión CentralAuth en MediaWiki versiones hasta 1.36. Los bloqueos automáticos para los bloques de supresión emitidos por CentralAuth no son implementados apropiadamente

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H