CVE-2021-21275: Oracle Communications Cloud Native Core Network Slice Selection Function

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit tokens.

Affected products

• Oracle Communications Cloud Native Core Network Slice Selection Function: version 1.2.1 only
• Oracle Communications Pricing Design Center: version 12.0.0.4.0 only; version 12.0.0.5.0 only
• Report Project Report: before 2021-01-21 (fixed in 2021-01-21)

Published 2021-01-25. Last modified 2026-06-17.