VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Oct 11, 2021· Updated Jun 17, 2026

CVE-2021-41800

CVE-2021-41800

Description

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
mediawiki/corePackagist
< 1.36.21.36.2

Affected products

7
  • MediaWiki/Mediawiki
    cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
    Range: <1.36.2
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
  • MediaWiki/MediaWikidescription
  • osv-coords2 versions
    pkg:bitnami/mediawikipkg:composer/mediawiki/core
    < 1.36.2+ 1 more
    • (no CPE)range: < 1.36.2
    • (no CPE)range: < 1.36.2

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.