Medium severity4.3NVD Advisory· Published Apr 22, 2021· Updated Jun 17, 2026

CVE-2021-31547

Description

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its AbuseFilterCheckMatch API reveals suppressed edits and usernames to unprivileged users through the iteration of crafted AbuseFilter rules.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Range: <=1.35.2
MediaWiki/AbuseFilter extensiondescription
Wikimedia Foundation/AbuseFilter extensionllm-create
Range: <=1.35.2
MediaWiki/AbuseFilter extensionllm-fuzzy
Range: <=1.35.2
osv-coords
pkg:bitnami/mediawiki
Range: < 1.35.3

Patches

Vulnerability mechanics

References

gerrit.wikimedia.org/r/q/I3f7dbd8b873d411e37c8c3aac2339bf5ec36907dnvdIssue TrackingThird Party Advisory
gerrit.wikimedia.org/r/q/I4900b1be73323599d74e3164447f81eded094d75nvdIssue TrackingThird Party Advisory
phabricator.wikimedia.org/T223654nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000