Unrated
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits...
CVE-2020-35475
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-35475 mediawiki Fixed in: 1:1.35.1-1
- Ubuntu UBUNTU-CVE-2020-35475 mediawiki
Original description The description as published by the source.
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. (The right column with the changeable groups is not affected and is escaped correctly.)
References
- advisory lists.wikimedia.org
- advisory debian.org
- report phabricator.wikimedia.org
- web lists.fedoraproject.org