Описание
MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 1:1.31.6-1 |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 1:1.31.6-1 |
| esm-apps/jammy | not-affected | 1:1.31.6-1 |
| esm-apps/noble | not-affected | 1:1.31.6-1 |
| esm-apps/resolute | not-affected | 1:1.31.6-1 |
| esm-infra-legacy/trusty | DNE |
Показывать по
EPSS
5.8 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.
MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklis ...
Уязвимость элементов программного средства для реализации гипертекстовой среды MediaWiki, связанная с переадресацией url на ненадежный сайт, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным и оказать воздействие на целостность данных
ALT-PU-2019-3367: package `mediawiki` update to version 1.34.0-alt1
EPSS
5.8 Medium
CVSS2
6.1 Medium
CVSS3