Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-48pv-xvcw-jg8h

Опубликовано: 25 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

EPSS

Процентиль: 49%
0.00256
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
около 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

CVSS3: 6.1
redhat
около 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

CVSS3: 6.1
nvd
около 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

EPSS

Процентиль: 49%
0.00256
Низкий

Дефекты

CWE-79