CVE-2021-46147: Mediawiki

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. MassEditRegex allows CSRF.

Affected products

• Mediawiki Mediawiki: before 1.35.5 (fixed in 1.35.5); from 1.36.0, before 1.36.3 (fixed in 1.36.3); from 1.37.0, before 1.37.1 (fixed in 1.37.1)

Published 2022-01-10. Last modified 2026-06-17.