Critical severity9.4NVD Advisory· Published Apr 28, 2021· Updated Jun 17, 2026
CVE-2021-29483
CVE-2021-29483
Description
ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration variables set through the ManageWiki variable to all users. This has been patched by https://github.com/miraheze/ManageWiki/compare/99f3b2c8af18...befb83c66f5b.patch. If you are unable to patch set $wgAPIListModules['wikiconfig'] = 'ApiQueryDisabled'; or remove private config as a workaround.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:miraheze:managewiki:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:miraheze:managewiki:*:*:*:*:*:*:*:*range: <2021-04-28
- (no CPE)
- miraheze/ManageWikiv5Range: < befb83c66f5b643e174897ea41a8a46679b26304
Patches
Vulnerability mechanics
References
3- github.com/miraheze/ManageWiki/commit/befb83c66f5b643e174897ea41a8a46679b26304nvdPatchThird Party Advisory
- github.com/miraheze/ManageWiki/security/advisories/GHSA-jmc9-rv2f-g8vvnvdMitigationPatchThird Party Advisory
- phabricator.miraheze.org/T7213nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.