CVE-2021-31552 Business logic in n/a
Attackers can bypass account blocking rules to create accounts and enumerate associated IP addresses, undermining abuse prevention mechanisms.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-31552?
CVE-2021-31552 is a medium-severity vulnerability in Mediawiki Mediawiki, published on 22 Apr 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly executed certain rules related to blocking accounts after account creation. Such rules would allow for user accounts to be created while blocking only the IP address used to create an account (and not the user account itself). Such rules could also be used by a nefarious, unprivileged user to catalog and enumerate any number of IP addresses related to these account creations.
Weakness: CWE-863
Which versions are affected by CVE-2021-31552?
1 open source package ship an affected version, including mediawiki. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
mediawiki Bitnami | All versions | 1.35.3 |
Products include Mediawiki Mediawiki.
How do I fix CVE-2021-31552?
Upgrade mediawiki to 1.35.3 or later.
Is CVE-2021-31552 being exploited?
There is no known exploitation of CVE-2021-31552 in the wild and no public exploit code.
Other vulnerabilities in Mediawiki Mediawiki
Sources
Also known as BIT-mediawiki-2021-31552, GHSA-gq3q-wc77-8wxx.