High severity8.8NVD Advisory· Published Oct 11, 2021· Updated Jun 17, 2026
CVE-2021-41801
CVE-2021-41801
Description
The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time (due to the job queue backlog)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <=1.41
- MediaWiki/ReplaceTextdescription
Patches
Vulnerability mechanics
References
2- phabricator.wikimedia.org/T279090nvdIssue TrackingPatchVendor Advisory
- lists.wikimedia.org/hyperkitty/list/wikitech-l%40lists.wikimedia.org/thread/2IFS5CM2YV4VMSODPX3J2LFHKSEWVFV5/nvd
News mentions
0No linked articles in our index yet.