Описание
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass.
This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.
A flaw was found in The Wikimedia Foundation Mediawiki - WikiLambda Extension. This vulnerability, caused by improper neutralization of input terminators, allows an attacker to bypass authentication. This could lead to unauthorized access to the system.
Отчет
This Critical flaw in the Mediawiki WikiLambda Extension allows an unauthenticated attacker to bypass authentication mechanisms due to improper input neutralization. This could lead to unauthorized access to systems where the WikiLambda Extension is deployed and enabled, posing a significant risk to data integrity and confidentiality.
Меры по смягчению последствий
To mitigate this vulnerability, disable the MediaWiki WikiLambda Extension if it is not required for your deployment. This can typically be achieved by commenting out or removing the extension's entry in the LocalSettings.php configuration file. Restricting network access to the MediaWiki instance to trusted networks or users can also reduce exposure. Disabling the extension will affect any functionality dependent on WikiLambda.
Дополнительная информация
Статус:
9.1 Critical
CVSS3
Связанные уязвимости
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.
9.1 Critical
CVSS3