Non évaluée
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. E-Widgets does widget replacement i...
CVE-2023-22911
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2023-22911 mediawiki
Description d'origine La description telle que publiée par la source (souvent en anglais).
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. E-Widgets does widget replacement in HTML attributes, which can lead to XSS, because widget authors often do not expect that their widget is executed in an HTML attribute context.
Références
- advisory github.com
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- web phabricator.wikimedia.org