Non évaluée

An issue was discovered in the Growth extension in MediaWiki through 1.36.2. Any admin can add arbitrary JavaScript code to the Newcomer home page foo...

CVE-2021-42048 Première détection SecPulse Sep 29, 2022

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in the Growth extension in MediaWiki through 1.36.2. Any admin can add arbitrary JavaScript code to the Newcomer home page footer, which can be executed by viewers with zero edits.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch gerrit.wikimedia.org
patch phabricator.wikimedia.org

Faits clés

Gravité: Non évaluée
Publication: Sep 29, 2022
Première détection SecPulse: Sep 29, 2022

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54