Non évaluée

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the "get edits" type is vulnerable t...

CVE-2023-37255 Première détection SecPulse Jun 29, 2023

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the "get edits" type is vulnerable to HTML injection through the User-Agent HTTP request header.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
web phabricator.wikimedia.org

Faits clés

Gravité: Non évaluée
Publication: Jun 29, 2023
Première détection SecPulse: Jun 29, 2023

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:02