exploitDog

GHSA-48pv-xvcw-jg8h

Опубликовано: 25 дек. 2021

Источник: github

Github: Не прошло ревью

Описание

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2021-45474
https://gerrit.wikimedia.org/r/q/Id1c8910aeac5b452fbabeddab70360765518223e
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z7JNQA53K675TQBBJPZRAG5ZT6XES3IS
https://phabricator.wikimedia.org/T296605

EPSS

Процентиль: 60%

0.00974

Низкий

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2021-45474

CVSS3: 6.1

ubuntu

больше 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

CVE-2021-45474

CVSS3: 6.1

redhat

больше 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

CVE-2021-45474

CVSS3: 6.1

nvd

больше 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

EPSS

Процентиль: 60%

0.00974

Низкий

CVE ID

Дефекты

CWE-79