CVE-2021-31549: Mediawiki

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The Special:AbuseFilter/examine form allowed for the disclosure of suppressed MediaWiki usernames to unprivileged users.

Affected products

• Mediawiki Mediawiki: up to and including 1.35.2

Published 2021-04-22. Last modified 2026-06-17.