CVE-2021-44854: Mediawiki

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.

Affected products

• Mediawiki Mediawiki: before 1.35.5 (fixed in 1.35.5); from 1.36.0, before 1.36.3 (fixed in 1.36.3); version 1.37.0 only

Published 2022-12-26. Last modified 2026-06-17.