Описание
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit.
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2023-29134
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/895774
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/898722
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/900133
- https://phabricator.wikimedia.org/T331362
- https://phabricator.wikimedia.org/rECRG920f3c19a84175bcfe93f41ecf9f8cef32730f8e
Связанные уязвимости
CVSS3: 8.6
nvd
почти 2 года назад
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit.