diff --git a/salt/profile/wiki/files/LocalSettings.php b/salt/profile/wiki/files/LocalSettings.php
index 198fb78..32dcee5 100644
--- a/salt/profile/wiki/files/LocalSettings.php
+++ b/salt/profile/wiki/files/LocalSettings.php
@@ -367,3 +367,9 @@ $wgCirrusSearchNamespaceWeights = array(
 );
 
 # ----------------------------------
+
+# hotfix from 2021-12-15 security announcement to disable vulnerable code
+  $wgActions['mcrundo'] = false;
+  $wgActions['mcrrestore'] = false;
+  $wgWhitelistRead = [];
+  $wgWhitelistReadRegexp = [];