VulnerableCode Vulnerability Details

Search for vulnerabilities

Vulnerability details: VCID-pb6q-3j39-aaaf

Essentials
Severities (98)
References (27)
Severity details (10)
Exploits (0)
EPSS
History (0)

Vulnerability ID	VCID-pb6q-3j39-aaaf
Aliases	CVE-2021-44854
Summary	An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.
Status	Published
Exploitability	0.5
Weighted Severity	6.2
Risk	3.1
Affected and Fixed Packages	Package Details

Weaknesses (2)

CWE-668	Exposure of Resource to Wrong Sphere
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor

System	Score	Found at
cvssv3	3.5	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44854.json
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00078	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.0009	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00122	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
epss	0.00291	https://api.first.org/data/v1/epss?cve=CVE-2021-44854
cvssv3	5.3	https://nvd.nist.gov/vuln/detail/CVE-2021-44854
cvssv3.1	5.3	https://nvd.nist.gov/vuln/detail/CVE-2021-44854
cvssv3.1	5.3	https://phabricator.wikimedia.org/T292763
ssvc	Track	https://phabricator.wikimedia.org/T292763
archlinux	Unknown	https://security.archlinux.org/AVG-2823
cvssv3.1	5.3	https://security.gentoo.org/glsa/202305-24
cvssv3.1	7.7	https://security.gentoo.org/glsa/202305-24
generic_textual	HIGH	https://security.gentoo.org/glsa/202305-24
ssvc	Track	https://security.gentoo.org/glsa/202305-24

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44854.json
		https://api.first.org/data/v1/epss?cve=CVE-2021-44854
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
		https://phabricator.wikimedia.org/T292763
		https://security.gentoo.org/glsa/202305-24
2156316		https://bugzilla.redhat.com/show_bug.cgi?id=2156316
AVG-2823		https://security.archlinux.org/AVG-2823
cpe:2.3:a:mediawiki:mediawiki::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki::::::::
cpe:2.3:a:mediawiki:mediawiki:1.37.0:-::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.37.0:-::::::
cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc0::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc0::::::
cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc1::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc1::::::
cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc2::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.37.0:rc2::::::
CVE-2021-44854		https://nvd.nist.gov/vuln/detail/CVE-2021-44854

No exploits are available.

Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44854.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2021-44854

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2021-44854

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://phabricator.wikimedia.org/T292763

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:53:28Z/ Found at https://phabricator.wikimedia.org/T292763

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://security.gentoo.org/glsa/202305-24

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Found at https://security.gentoo.org/glsa/202305-24

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:53:28Z/ Found at https://security.gentoo.org/glsa/202305-24

Exploit Prediction Scoring System (EPSS)

Percentile	0.34542
EPSS Score	0.00078
Published At	Nov. 1, 2024, midnight

Date	Actor	Action	Source	VulnerableCode Version
There are no relevant records.