CVE-2021-36132

An issue was discovered in the FileImporter extension in MediaWiki through 1.36. For certain relaxed configurations of the $wgFileImporterRequiredRight variable, it might not validate all appropriate user rights, thus allowing a user with insufficient rights to perform operations specifically fil...

CVE-2021-36132

An issue was discovered in the FileImporter extension in MediaWiki through 1.36. For certain relaxed configurations of the $wgFileImporterRequiredRight variable, it might not validate all appropriate user rights, thus allowing a user with insufficient rights to perform operations specifically fil...

CVE-2021-36132

CVE-2021-36132 affects MediaWiki’s FileImporter extension (up to and including 1.36). The root cause is relaxed configurations of $wgFileImporterRequiredRight that fail to validate all relevant user rights, allowing a user with insufficient rights to upload files. Impact described in the linked a...