In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended API access. When a bot account has a "sitewide block" applied, it is able to still "purge" pages through the MediaWiki Action API (which a "sitewide block" should have prevented).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have     certain unintended API access. When a bot account has a sitewide block applied, it is able to still     purge pages through the MediaWiki Action API (which a sitewide block should have prevented).
    (CVE-2021-35197)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202107-40 (MediaWiki: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MediaWiki. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2779 advisory.

  - In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have     certain unintended API access. When a bot account has a sitewide block applied, it is able to still     purge pages through the MediaWiki Action API (which a sitewide block should have prevented).
    (CVE-2021-35197)

  - MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on     the Special:Search results page. (CVE-2021-41798)

  - MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query     processing time). ApiQueryBacklinks (action=query&list;=backlinks) can cause a full table scan.
    (CVE-2021-41799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4979 advisory.

    Multiple security issues were found in MediaWiki, a website engine for collaborative work, which could     result in cross-site scripting, denial of service and a bypass of restrictions in the Replace Text     extension. For the oldstable distribution (buster), these problems have been fixed in version     1:1.31.16-1~deb10u1. For the stable distribution (bullseye), these problems have been fixed in version     1:1.35.4-1~deb11u1. We recommend that you upgrade your mediawiki packages. For the detailed security     status of mediawiki please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/mediawiki

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
244994	Linux Distros Unpatched Vulnerability : CVE-2021-35197	Nessus	Misc.	high
156986	GLSA-202107-40 : MediaWiki: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
153966	Debian DLA-2779-1 : mediawiki - LTS security update	Nessus	Debian Local Security Checks	high
153862	Debian DSA-4979-1 : mediawiki - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2021-35197

high

Tenable Plugins

high

high

high

high