Non évaluée

An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly escap...

CVE-2021-42046 Première détection SecPulse Sep 29, 2022

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly escaped and allowed for users to inject HTML and JavaScript.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory phabricator.wikimedia.org
patch gerrit.wikimedia.org
patch gerrit.wikimedia.org

Faits clés

Gravité: Non évaluée
Publication: Sep 29, 2022
Première détection SecPulse: Sep 29, 2022

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54