VulnerableCode Vulnerability Details

Search for vulnerabilities

Vulnerability details: VCID-egth-zjt7-aaab

Essentials
Severities (97)
References (27)
Severity details (10)
Exploits (0)
EPSS
History (0)

Vulnerability ID	VCID-egth-zjt7-aaab
Aliases	CVE-2021-44856
Summary	An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value.
Status	Published
Exploitability	0.5
Weighted Severity	6.2
Risk	3.1
Affected and Fixed Packages	Package Details

Weaknesses (1)

CWE-754

Improper Check for Unusual or Exceptional Conditions

System	Score	Found at
cvssv3	4.9	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44856.json
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0011	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
epss	0.0026	https://api.first.org/data/v1/epss?cve=CVE-2021-44856
cvssv3	5.3	https://nvd.nist.gov/vuln/detail/CVE-2021-44856
cvssv3.1	5.3	https://nvd.nist.gov/vuln/detail/CVE-2021-44856
cvssv3.1	5.3	https://phabricator.wikimedia.org/T271037
ssvc	Track	https://phabricator.wikimedia.org/T271037
archlinux	Unknown	https://security.archlinux.org/AVG-2823
cvssv3.1	5.3	https://security.gentoo.org/glsa/202305-24
cvssv3.1	7.7	https://security.gentoo.org/glsa/202305-24
generic_textual	HIGH	https://security.gentoo.org/glsa/202305-24
ssvc	Track	https://security.gentoo.org/glsa/202305-24

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44856.json
		https://api.first.org/data/v1/epss?cve=CVE-2021-44856
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
		https://phabricator.wikimedia.org/T271037
		https://security.gentoo.org/glsa/202305-24
2156326		https://bugzilla.redhat.com/show_bug.cgi?id=2156326
AVG-2823		https://security.archlinux.org/AVG-2823
cpe:2.3:a:mediawiki:mediawiki::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki::::::::
cpe:2.3:a:mediawiki:mediawiki:1.37.0:-::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.37.0:-::::::
cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc0::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc0::::::
cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc1::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc1::::::
cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc2::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc2::::::
CVE-2021-44856		https://nvd.nist.gov/vuln/detail/CVE-2021-44856

No exploits are available.

Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44856.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2021-44856

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2021-44856

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://phabricator.wikimedia.org/T271037

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:49:08Z/ Found at https://phabricator.wikimedia.org/T271037

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://security.gentoo.org/glsa/202305-24

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Found at https://security.gentoo.org/glsa/202305-24

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:49:08Z/ Found at https://security.gentoo.org/glsa/202305-24

Exploit Prediction Scoring System (EPSS)

Percentile	0.34542
EPSS Score	0.00078
Published At	Nov. 1, 2024, midnight

Date	Actor	Action	Source	VulnerableCode Version
There are no relevant records.