What’s Vulnerable › Vulnerabilities

CVE-2020-27621

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-10-22 · updated 2026-06-17

Description

The FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user actions to a specific user's IP address. Instead, for various actions, it would report the IP address of an internal Wikimedia Foundation server by omitting X-Forwarded-For data. This resulted in an inability to properly audit and attribute various user actions performed via the FileImporter extension.

Affected products

• Wikimedia Foundation MediaWiki: through 1.35.0

References

• https://gerrit.wikimedia.org/r/q/I24a240253c7a5c66dd493a68e8c23d95a17e1b21
• https://phabricator.wikimedia.org/T265810
• https://gerrit.wikimedia.org/r/q/I24a240253c7a5c66dd493a68e8c23d95a17e1b21
• https://phabricator.wikimedia.org/T265810

Get alerted when CVE-2020-27621 or the next vulnerability affects your stack